Index: net/cookies/canonical_cookie.cc |
diff --git a/net/cookies/canonical_cookie.cc b/net/cookies/canonical_cookie.cc |
index 2469f28660aa073efe634e028a8c4c0a16d810eb..f8f0ca9d46b6c26066b43b6bdf7156a996ffab5d 100644 |
--- a/net/cookies/canonical_cookie.cc |
+++ b/net/cookies/canonical_cookie.cc |
@@ -219,7 +219,7 @@ std::unique_ptr<CanonicalCookie> CanonicalCookie::Create( |
// Per 3.2.1 of "Deprecate modification of 'secure' cookies from non-secure |
// origins", if the cookie's "secure-only-flag" is "true" and the requesting |
// URL does not have a secure scheme, the cookie should be thrown away. |
- // https://tools.ietf.org/html/draft-west-leave-secure-cookies-alone |
+ // https://tools.ietf.org/html/draft-ietf-httpbis-cookie-alone |
if (options.enforce_strict_secure() && parsed_cookie.IsSecure() && |
!url.SchemeIsCryptographic()) { |
VLOG(kVlogSetCookies) |