From: Lucas Di Pentima Date: Thu, 21 Jan 2021 18:15:20 +0000 (-0300) Subject: 17109: Fixes typo. X-Git-Tag: 2.2.0~161^2 X-Git-Url: https://git.arvados.org/arvados.git/commitdiff_plain/bd535934937eb0863bd8eaec0b62ab81bc8e4700 17109: Fixes typo. Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima --- diff --git a/doc/api/keep-web-urls.html.textile.liquid b/doc/api/keep-web-urls.html.textile.liquid index 90df5b9fd6..1770a259b7 100644 --- a/doc/api/keep-web-urls.html.textile.liquid +++ b/doc/api/keep-web-urls.html.textile.liquid @@ -76,7 +76,7 @@ pre. http://collections.example.com/collections/uuid_or_pdh/foo/bar.txt h2(#same-site). Same-site requirements for requests with tokens -Although keep-web doesn't care about the domain part of the URL, the clients do: specially when rendering inline content. +Although keep-web doesn't care about the domain part of the URL, the clients do: especially when rendering inline content. When a client passes a token in the URL, keep-web sends a redirect response placing the token in a @Set-Cookie@ header with the @SameSite=Lax@ attribute. The browser will ignore the cookie if it's not coming from a _same-site_ request, and thus its subsequent request will fail with a @401 Unauthorized@ error.