From dc38e632b135a517ccae75db918b8a95de615e77 Mon Sep 17 00:00:00 2001
From: Anne van Kesteren
every top-level Document has ` every top-level Document has `Cross-Origin-Opener-Policy:
Cross-Origin-Opener-Policy: same-origin
`, and
every Document has a `Cross-Origin-Embedder-Policy
` header
@@ -83024,10 +83024,10 @@ interface BarProp {
A Document
delivered over a secure context can request that it be
placed in an origin-keyed agent
- cluster, by using the `Origin-Agent-Cluster
` HTTP response header. This header
- is a structured header whose value must be a boolean.
Origin-Agent-Cluster
` HTTP
+ response header. This header is a structured header
+ whose value must be a boolean.
Per the processing model in the create
and initialize a new Document
object, valuesValues
@@ -83045,11 +83045,11 @@ interface BarProp {
to allocate implementation-specific resources corresponding to agent
clusters, such as processes or threads, more efficiently.
Note that within a browsing context group, the `Origin-Agent-Cluster
` header can never cause same-origin
- Document
objects to end up in different agent
- clusters, even if one sends the header and the other doesn't. This is
- prevented by means of the historical agent cluster key map.
Note that within a browsing context group, the `Origin-Agent-Cluster
`
+ header can never cause same-origin Document
objects to end up in different agent clusters, even if one sends the header and the other
+ doesn't. This is prevented by means of the historical agent cluster key
+ map.
This means that the originAgentCluster
getter can return false, even if the
@@ -83069,9 +83069,8 @@ interface BarProp {
Similarly, Document
s whose agent cluster's
cross-origin isolation mode is not
"none
" are automatically origin-keyed. The
- `Origin-Agent-Cluster
` header might be useful as
- an additional hint to implementations about resource allocation, since the `Cross-Origin-Opener-Policy
` and
+ `Origin-Agent-Cluster
` header might be useful as an additional hint to
+ implementations about resource allocation, since the `Cross-Origin-Opener-Policy
` and
`Cross-Origin-Embedder-Policy
` headers used to achieve cross-origin isolation are
more about ensuring that everything in the same address space opts in to being there. But adding
it would have no additional observable effects on author code.
"same-origin-plus-COEP
" cannot
- be directly set via the `Cross-Origin-Opener-Policy
` header, but results
- from a combination of setting both `Cross-Origin-Opener-Policy: same-origin
` and a
+ be directly set via the `Cross-Origin-Opener-Policy
` header, but results
+ from a combination of setting both `Cross-Origin-Opener-Policy:
+ same-origin
` and a
`Cross-Origin-Embedder-Policy
` header whose value is compatible with
cross-origin isolation together.
@@ -83497,15 +83494,14 @@ interface BarProp {
Return false.
A Document
's cross-origin opener
- policy is derived from the `Cross-Origin-Opener-Policy
` and the `Cross-Origin-Opener-Policy-Report-Only
`
- HTTP response headers. These headers are structured
- headers whose value must be a token.
-
Cross-Origin-Opener-Policy
` and `Cross-Origin-Opener-Policy-Report-Only
` HTTP response headers.
+ These headers are structured headers whose value must
+ be a token.
The valid token values are the opener policy values. The token may also have @@ -83530,9 +83526,8 @@ interface BarProp { policy.
Let value be the result of getting a structured field value given
- `Cross-Origin-Opener-Policy
` and "item
" from response's header list.
Cross-Origin-Opener-Policy
` and "item
" from
+ response's header list.
If parsedItem is not null, then:
@@ -83570,10 +83565,9 @@ interface BarProp {Set parsedItem to the result of getting a structured field value
- given `Cross-Origin-Opener-Policy-Report-Only
` and
- "item
" from response's header list.
Cross-Origin-Opener-Policy-Report-Only
` and "item
"
+ from response's header
+ list.
If parsedItem is not null, then:
@@ -84670,13 +84664,14 @@ interface BarProp { is "coep
". It is visible to
ReportingObserver
s.
- The ` The ` The valid token values are the whatwg/html issue #4782 and whatwg/html issue #5350 for defining
browsing session. It is roughly analogous to a top-level browsing
- context except that it cannot be replaced due to a ` A top-level browsing context has an associated browsing session which is a browsing
@@ -88021,9 +88015,8 @@ interface Location { // but see also Origin-Agent-Cluster` and "Cross-Origin-Embedder-Policy
` and
- `Cross-Origin-Embedder-Policy-Report-Only
` HTTP response header fields allow a server
- to declare an embedder policy for an environment settings object. These
- headers are structured headers whose values must be
- token.
+ Cross-Origin-Embedder-Policy
` and
+ `Cross-Origin-Embedder-Policy-Report-Only
` HTTP response
+ headers allow a server to declare an embedder policy for an environment
+ settings object. These headers are structured
+ headers whose values must be token.
Cross-Origin-Opener-Policy
` header or
- navigation.Cross-Origin-Opener-Policy
` header or navigation.item
" from response's header list.
Origin-Agent-Cluster
` and "item
" from
+ response's header list.
Let requestsOAC be true if oacHeader is not
null and oacHeader[0] is the WindowOrWorkerGlobalScope {
Returns whether scripts running in this global are allowed to use APIs that require
- cross-origin isolation. This depends on the `self.crossOriginIsolated
Cross-Origin-Opener-Policy
` and
+ cross-origin isolation. This depends on the `Cross-Origin-Opener-Policy
` and
`Cross-Origin-Embedder-Policy
` HTTP response headers and the "cross-origin-isolated
" feature.text/event-stream
resources.
Cross-Origin-Embedder-Policy
`This section describes a header for registration in the Permanent Message Header Field - Registry.
- -Cross-Origin-Embedder-Policy-Report-Only
`This section describes a header for registration in the Permanent Message Header Field - Registry.
- -Cross-Origin-Opener-Policy
`This section describes a header for registration in the Permanent Message Header Field - Registry.
- -Cross-Origin-Opener-Policy-Report-Only
`This section describes a header for registration in the Permanent Message Header Field - Registry.
- -Origin-Agent-Cluster
`This section describes a header for registration in the Permanent Message Header Field - Registry.
- -Ping-From
`This section describes a header for registration in the Permanent Message Header Field