Editorial: fix typo

Author: sideshowbarker

fetch.bs

@@ -2962,7 +2962,7 @@ through side channels, such as timing. If server developers wish to denote this
 
 <p class=note>If desired, “failure” could also be shared, but that would make it a successful HTTP
 response. That is why for a successful HTTP response to a <a>CORS request</a> that is not a
-<a>CORS-preflight requests</a> the <a for=/>status</a> can be anything, including 403.
+<a>CORS-preflight request</a> the <a for=/>status</a> can be anything, including 403.
 
 <p>Ultimately server developers have a lot of freedom in how they handle HTTP responses and these
 tactics can differ between the response to the <a>CORS-preflight request</a> and the