Fetch API: Credentials mode default to "same-origin"
A Request object’s credentials mode defaults to “omit” in Chrome right now. A spec change recently changed the default to “same-origin”, thus providing credentials to same-origin requests instead of omitting them.
Status in Chromium
Enabled by default (tracking bug) in:
- Chrome for desktop release 68
- Chrome for Android release 68
- Android WebView release 68
Consensus & Standardization
Last updated on 2018-07-31