Nits and revise note

Author: bvandersloot-mozilla

fetch.bs

@@ -2281,7 +2281,7 @@ or "<code>object</code>".
    <li>Set <var>lastURL</var> to <var>url</var>.
   </ol>
 
- <li>Return <var>computedTaint</var>.
+ <li><p>Return <var>computedTaint</var>.
 </ol>
 </div>
 
@@ -2393,20 +2393,20 @@ source of security bugs. Please seek security review for features that deal with
  "<code>client</code>".
 
  <li><p>If <var>request</var>'s <a for=request>mode</a> is not "<code>no-cors</code>", then return
- true.</p>
+ true.
 
- <li><p>If <var>request</var>'s <a for=request>client</a> is null, then return true.</p>
+ <li><p>If <var>request</var>'s <a for=request>client</a> is null, then return true.
 
  <li><p>If <var>request</var>'s <a for=request>client</a>'s
  <a for="environment settings object">policy container</a>'s
  <a for="policy container">embedder policy</a>'s <a for="embedder policy">value</a> is not
- "<a for="embedder policy value"><code>credentialless</code></a>", then return true.</p>
+ "<a for="embedder policy value"><code>credentialless</code></a>", then return true.
 
  <li><p>If <var>request</var>'s <a for=request>origin</a> is <a>same origin</a> with
  <var>request</var>'s <a for=request>current URL</a>'s <a for=url>origin</a> and <var>request</var>'s
- <a for=request>redirect-taint</a> is not "<code>same-origin</code>", then return true.</p>
+ <a for=request>redirect-taint</a> is not "<code>same-origin</code>", then return true.
 
- <li><p>Return false.</p>
+ <li><p>Return false.
 </ol>
 </div>
 
@@ -4282,9 +4282,8 @@ given a <a for=/>request</a> <var>request</var>, run these steps:
  <li>
   <p>Let |httpOnlyAllowed| be true.
 
-  <p class=note>Since this algorithm is performed on a <a for=/>request</a>, we know that the
-  cookies were comsumed by HTTP, rather than script mechanisms such as
-  <code>document.cookie</code>.
+  <p class=note>True follows from this being invoked from <a>fetch</a>, as opposed to the
+  <code>document.cookie</code> getter steps for instance.
 
  <li>
   <p>Let |cookies| be the result of running <a>retrieve cookies</a> given |isSecure|,
@@ -4321,9 +4320,8 @@ given a <a for=/>request</a> <var>request</var>, run these steps:
  <li>
   <p>Let |httpOnlyAllowed| be true.
 
-  <p class=note>Since this algorithm is performed on a <a for=/>request</a>, we know that the
-  cookies were produced from HTTP, rather than script mechanisms such as
-  <code>document.cookie</code>.
+  <p class=note>True follows from this being invoked from <a>fetch</a>, as opposed to the
+  <code>document.cookie</code> getter steps for instance.
 
  <li><p>Let |sameSiteStrictOrLaxAllowed| be true if the result of [=determine the same-site mode=]
  for |request| is "<code>StrictOrLess</code>", and false otherwise.