AJAX call following 302 redirect sets origin to null

See here, this seems to suggest its related to a “privacy-sensitive” context.

Are there any browsers that set the origin header to “null” for privacy-sensitive contexts?