diff --git a/fetch.bs b/fetch.bs
index 9ed5f752d..aee8f82e3 100644
--- a/fetch.bs
+++ b/fetch.bs
@@ -2422,6 +2422,10 @@ with a <i>CORS flag</i> and <i>recursive flag</i>, run these steps:
  not <a lt="is local">local</a>, set
  <var>response</var> to a <a>network error</a>.
 
+ <li><p>If |request|'s <a for=request>url</a>'s <a for=url>potentially-dangling-markup flag</a>
+ is set, and |request|'s <a for=request>url</a>'s scheme is an <a>HTTP(S) scheme</a>, then set
+ <var>response</var> to a <a>network error</a>.
+
  <li><p>Execute <a href=https://w3c.github.io/webappsec-csp/#report-for-request>Report Content Security Policy violations for <var>request</var></a>.
  [[!CSP]]