diff --git a/source b/source index 51b22a7ba10..f50c4bfb395 100644 --- a/source +++ b/source @@ -9206,9 +9206,6 @@ partial interface Document { for="Document">policy container (a policy container), initially a new policy container, which contains policies which apply to the Document.

-

The Document has an embedder - policy (an embedder policy).

-

The Document has a permissions policy, which is a permissions policy, which is initially @@ -78868,10 +78865,6 @@ popup4.close(); document's referrer to the serialization of it.

-

  • If creator is non-null, then set document's - embedder policy to creator's - embedder policy.

    • -

  • If creator is non-null, then set document's policy container to a clone of creator's BarProp { Document.

    -
    The embedder policy
    -

    Return window's associated - Document's embedder - policy.

    -
    The cross-origin isolated capability
    @@ -83652,19 +83640,16 @@ interface BarProp {

    To check a navigation response's adherence to its embedder policy given a response response, a browsing context - target, and an environment environment:

    + target, and an embedder policy responsePolicy:

    1. If target is not a child browsing context, then return true.

      2. -

    2. Let responsePolicy be the result of obtaining an embedder policy from response and - environment.

      3. -

    3. Let parentPolicy be target's container document's embedder policy.

      4. + data-x="concept-document-policy-container">policy container's embedder policy.

    4. If parentPolicy's report-only value is "require-corp" and @@ -83703,7 +83688,8 @@ interface BarProp { data-x="concept-WorkerGlobalScope-embedder-policy">embedder policy.

    5. Let ownerPolicy be owner's embedder policy. + data-x="concept-settings-object-policy-container">policy container's embedder policy.

    6. If ownerPolicy's report-only value is "require-corp" and policy's @@ -83780,6 +83766,10 @@ interface BarProp {

    7. A CSP list, which is a CSP list. It is initially empty.

      8. +

    8. An embedder + policy, which is an embedder policy. It is initially a new embedder + policy.

      9. +

    9. A referrer policy, which is a referrer policy. It is initially the default referrer policy.

      10. @@ -83798,6 +83788,10 @@ interface BarProp { data-x="list append">append a copy of policy into clone's CSP list.

      +

    10. Set clone's embedder + policy to a copy of policyContainer's embedder policy.

      11. +

    11. Set clone's referrer policy to policyContainer's referrer policy.

      12. @@ -83827,7 +83821,8 @@ interface BarProp {

      To create a policy container from a fetch response - given a response response:

      + given a response response and an + environment-or-null environment:

      1. If response's URL's BarProp { result of parsing a response's Content Security Policies given response.

        2. +

      2. If environment is non-null, then set result's embedder policy to the result of obtaining an embedder policy given response + and environment. Otherwise, set it to "unsafe-none".

        3. +

      3. Set result's referrer policy to the result of parsing the `Referrer-Policy` header given response. BarProp {

      To initialize a worker global scope's policy - container given a WorkerGlobalScope workerGlobalScope and a response response:

      + container given a WorkerGlobalScope workerGlobalScope, a response response, and an environment + environment:

      1. @@ -83916,7 +83918,7 @@ interface BarProp {

      2. Otherwise, set workerGlobalScope's policy container to the result of creating a policy container from a fetch response given - response.

        3. + response and environment.

      Session history and navigation

      @@ -86294,8 +86296,9 @@ interface Location { // but see also reserved client.

    12. Let resultPolicyContainer be the result of determining navigation params policy container given response's Location { // but see also checking a navigation response's adherence to its embedder policy given response, browsingContext, and navigationParams's reserved environment is false, then set + data-x="navigation-params-policy-container">policy container's embedder policy is false, then set failure to true.

      Otherwise, if the result of

      Set document's current document readiness to "loading".

      13. -

    13. If navigationParam's reserved environment is non-null, then set - document's embedder policy to - the result of obtaining an embedder policy given - navigationParams's response and - navigationParam's reserved - environment. Otherwise, set it to "unsafe-none".

      14. -

    14. Run CSP initialization for a Document given document.

      @@ -89001,14 +88996,6 @@ interface BeforeUnloadEvent : Event {

      A policy container containing policies used for security checks.

    -
    An embedder policy
    - -

    An embedder policy used by cross-origin resource policy checks for fetches - performed using this environment settings object as a request client.

    -
    A cross-origin isolated capability
    @@ -100757,23 +100744,13 @@ interface SharedWorkerGlobalScope : WorkerGlobalScope data-x="concept-response-url">url.

  • Initialize worker global scope's - policy container given worker global scope, and response.

    • + policy container given worker global scope, response, and + inside settings.

  • If the Run CSP initialization for a global object algorithm returns "Blocked" when executed upon worker global scope, set response to a network error.

    • -

  • If response's url's scheme is a local scheme, then set - worker global scope's embedder policy to owner's - embedder policy.

    • - -

  • Otherwise, set worker global scope's embedder policy to the result of - obtaining an embedder policy from - response and inside settings.

    • -

  • If worker global scope's embedder policy is "SharedWorkerGlobalScope : WorkerGlobalScope data-x="concept-WorkerGlobalScope-policy-container">policy container.

    -
    The embedder policy
    -
    -

    Return worker global scope's embedder policy.

    -
    -
    The cross-origin isolated capability

    Return worker global scope's WorkletGlobalScope {}; container">clone of outsideSettings's policy container.

    • -

  • Let inheritedEmbedderPolicy be outsideSettings's embedder policy.

    • -

  • Let realm be the value of executionContext's Realm component.

    • @@ -102286,11 +102254,6 @@ interface WorkletGlobalScope {};

    Return inheritedPolicyContainer.

    -
    The embedder policy
    -
    -

    Return inheritedEmbedderPolicy.

    -
    -
    The cross-origin isolated capability

    Return TODO.