Review comments

Author: domenic

source

@@ -2487,6 +2487,7 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute
     <p>The following terms are defined in <cite>Fetch</cite>: <ref spec=FETCH></p>
 
     <ul class="brief">
+     <li><dfn data-x="header-abnf" data-x-href="https://fetch.spec.whatwg.org/#abnf">ABNF</dfn></li>
      <li><dfn><code>about:blank</code></dfn></li>
      <li>An <dfn data-x-href="https://fetch.spec.whatwg.org/#http-scheme">HTTP(S) scheme</dfn></li>
      <li>A <dfn data-x-href="https://fetch.spec.whatwg.org/#local-scheme">local scheme</dfn></li>
@@ -84808,7 +84809,9 @@ interface <dfn>BeforeUnloadEvent</dfn> : <span>Event</span> {
   `<code>X-Frame-Options</code>` are used in the same <span
   data-x="concept-response">response</span>, then `<code>X-Frame-Options</code>` is ignored.</p>
 
-  <p>TODO ABNF? Not sure of the normative status of those these days.</p>
+  <p>Its value <span data-x="header-abnf">ABNF</span>:</p>
+
+  <pre><code data-x="" class="abnf">X-Frame-Options = "DENY" / "SAMEORIGIN"</code></pre>
 
   <div w-nodev>
 
@@ -84840,12 +84843,13 @@ interface <dfn>BeforeUnloadEvent</dfn> : <span>Event</span> {
    `<code>X-Frame-Options</code>` from <var>response</var>'s <span
    data-x="concept-response-header-list">header list</span>.</p></li>
 
-   <li><p>If <var>xFrameOptions</var> <span data-x="list contains">contains</span> an <span>ASCII
-   case-insensitive</span> match for "<code data-x="">deny</code>", then return false.</p></li>
+   <li><p>If <var>xFrameOptions</var> <span data-x="list contains">contains</span> a string that is
+   an <span>ASCII case-insensitive</span> match for "<code data-x="">deny</code>", then return
+   false.</p></li>
 
    <li>
-    <p>If <var>xFrameOptions</var> <span data-x="list contains">contains</span> an <span>ASCII
-    case-insensitive</span> match for "<code data-x="">sameorigin</code>", then:</p>
+    <p>If <var>xFrameOptions</var> <span data-x="list contains">contains</span> a string that is an
+    <span>ASCII case-insensitive</span> match for "<code data-x="">sameorigin</code>", then:</p>
 
     <ol>
      <li><p>Let <var>ancestorBC</var> be <var>browsingContext</var>'s <span>parent browsing