diff --git a/.gitattributes b/.gitattributes index 8972a879b8..f1e92ce7de 100644 --- a/.gitattributes +++ b/.gitattributes @@ -12,7 +12,7 @@ # - Deny applying with `git apply --whitespace=error-all`. # - Fix automatically with `git apply --whitespace=fix`. ############################################################################### -[attr]cleantext text eol=crlf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=4 +[attr]cleantext text eol=crlf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=4 -binary ############################################################################### # DEFAULT VALUE diff --git a/sections/attributes.include b/sections/attributes.include index 731e9ef86a..7dd9fdf43e 100644 --- a/sections/attributes.include +++ b/sections/attributes.include @@ -600,6 +600,12 @@ Whether to allow the value to be edited by the user Boolean attribute + + referrerpolicy + <{a}>; <{area}>; <{iframe}>; <{img}>; <{link}> + Referrer policy for fetches initiated by the element + Referrer policy + <{links/rel}> <{a}>; <{area}>; <{link}> diff --git a/sections/browsers.include b/sections/browsers.include index 66ef5d3362..85aa07aa21 100644 --- a/sections/browsers.include +++ b/sections/browsers.include @@ -3944,14 +3944,17 @@ window. 4. Set the {{Document}}'s HTTPS state to the [=response/HTTPS state=] of the resource used to generate the document. - 5. Execute the Initialize a Document's CSP list algorithm on the {{Document}} + 5. Set the {{Document}}'s referrer policy to the result of + parsing the Referrer-Policy header of the response + used to generate the document. [[!REFERRERPOLICY]] + 6. Execute the Initialize a Document's CSP list algorithm on the {{Document}} object and the resource used to generate the document. [[CSP3]] - 6. Set [=the document's referrer=] to the + 7. Set [=the document's referrer=] to the address of the resource from which Request-URIs are obtained as determined when the fetch algorithm obtained the resource, if that algorithm was used and determined such a value; otherwise, set it to the empty string. - 7. Implement the sandboxing for the {{Document}}. - 8. If the active sandboxing flag set of the {{Document}}'s browsing context or any + 8. Implement the sandboxing for the {{Document}}. + 9. If the active sandboxing flag set of the {{Document}}'s browsing context or any of its ancestor browsing contexts (if any) have the sandboxed fullscreen browsing context flag set, then skip this step. diff --git a/sections/elements.include b/sections/elements.include index 335554bb88..6ad9ad1f45 100644 --- a/sections/elements.include +++ b/sections/elements.include @@ -29,7 +29,8 @@ <{links/download}>; <{links/rel}>; <{links/hreflang}>; - <{links/type}> + <{links/type}>; + <{link/referrerpolicy}> {{HTMLAnchorElement}} @@ -70,7 +71,8 @@ <{links/download}>; <{links/rel}>; <{links/hreflang}>; - <{links/type}> + <{links/type}>; + <{link/referrerpolicy}> {{HTMLAreaElement}} @@ -608,7 +610,8 @@ <{iframe/sandbox}>; <{iframe/allowfullscreen}>; <{media/width}>; - <{media/height}> + <{media/height}>; + <{iframe/referrerpolicy}> {{HTMLIFrameElement}} @@ -631,7 +634,8 @@ <{img/ismap}>; <{img/longdesc}>; <{media/width}>; - <{media/height}> + <{media/height}>; + <{img/referrerpolicy}> {{HTMLImageElement}} @@ -765,6 +769,7 @@ <{link/crossorigin}>; <{link/rel}>; <{link/media}>; + <{link/referrerpolicy}>; <{link/nonce}>; <{link/hreflang}>; <{link/type}>; diff --git a/sections/infrastructure.include b/sections/infrastructure.include index a200112a70..8816460711 100644 --- a/sections/infrastructure.include +++ b/sections/infrastructure.include @@ -166,7 +166,7 @@ A node is inserted into a document when the insertion steps are invoked with it as the argument and it is now in a document tree. Analogously, a - node + node is removed from a document when the removing steps are invoked with it as the argument and it is now no longer in a document tree. @@ -712,8 +712,18 @@ * cache mode * redirect mode * cryptographic nonce metadata + * referrer policy * parser metadata + :: The following terms are defined in Referrer Policy [[!REFERRERPOLICY]] + + * referrer policy + * The `Referrer-Policy` HTTP header + * The parse a referrer policy from a `Referrer-Policy` header algorithm + * The "no-referrer", + "no-referrer-when-downgrade", and + "unsafe-url" referrer policies + : Web IDL :: The IDL fragments in this specification must be interpreted as required for conforming IDL fragments, as described in the Web IDL specification. [[!WEBIDL]] @@ -3770,6 +3780,33 @@ missing value default, used when the attribute is omitted, is the No CORS state. +

Referrer policy attributes

+ + A referrer policy attribute is an enumerated attribute. + Each referrer policy, including the empty string, is a keyword for this attribute, + mapping to a state of the same name. + + The attribute's invalid value default and missing value default + are both the empty string state. + + The impact of these states on the processing model of various fetches is defined + in more detail throughout this specification, in the WHATWG Fetch standard, and in Referrer Policy. + [[!FETCH]] [[!REFERRERPOLICY]] + +
+ Several signals can contribute to which processing model is used for a given fetch; + a referrer policy attribute is only one of them. In general, the order in which these signals are processed are: +
    +
  1. First, the presence of a <{link/}noreferrer}> link + type;
    2. +
  2. Then, the value of a referrer policy attribute;
    3. +
  3. Then, the presence of any <{meta}> element with name attribute set to referrer.
    4. +
  4. Finally, the `Referrer-Policy` HTTP + header.
    5. +
+
+

Common DOM interfaces

Reflecting content attributes in IDL attributes

diff --git a/sections/semantics-document-metadata.include b/sections/semantics-document-metadata.include index aebc8cc283..f137587d66 100644 --- a/sections/semantics-document-metadata.include +++ b/sections/semantics-document-metadata.include @@ -332,6 +332,7 @@
nonce — Cryptographic nonce used in Content Security Policy checks [[CSP3]]
hreflang — Language of the linked resource
type — Hint for the type of the referenced resource
+
referrerpolicy - Referrer policy for fetches initiated by the element
sizes — Sizes of the icons (for <{link/rel}>="icon")
Also, the <{link/title}> attribute has special semantics on this element: Title of the @@ -357,7 +358,8 @@ [CEReactions] attribute DOMString hreflang; [CEReactions] attribute DOMString type; [CEReactions, SameObject, PutForwards=value] readonly attribute DOMTokenList sizes; - }; + [CEReactions] attribute DOMString referrerPolicy; + }; HTMLLinkElement implements LinkStyle;
@@ -463,7 +465,10 @@ For external resource links, the <{link/type}> attribute is used as a hint to user agents so that they can avoid fetching resources they do not support. - + The referrerpolicy attribute is a + referrer policy attribute. It is intended for use with external resource links, + where it helps set the referrer policy used when obtaining the external resource. + [[!REFERRERPOLICY]]. The title attribute gives the title of the link. With one exception, it is purely advisory. The value is text. The exception is for style sheet @@ -525,6 +530,10 @@ + The referrerPolicy IDL attribute must + reflect the referrerpolicy + content attribute, limited to only known values. + The IDL attribute relList must reflect the <{link/rel}> content attribute. @@ -630,7 +639,9 @@ {{Window}} object's environment settings object. 6. Set request's cryptographic nonce metadata to the current state of the <{link}> element's <{link/nonce}> content attribute. - 7. Fetch request. + 7. Set request's referrer policy to the current state of the + <{link}> element's <{link/referrerpolicy}> content attribute. + 8. Fetch request. User agents may opt to only try to obtain such resources when they are needed, instead of pro-actively fetching all the external resources that are not applied. @@ -963,6 +974,63 @@ inappropriate keywords.

+ : referrer + + :: The value must be a referrer policy, which defines the default + referrer policy for the Document. [[!REFERRERPOLICY]] + + If any meta elements are inserted into the document or + removed from the document, or existing meta elements have their name + or content attributes changed, user agents must run the following algorithm: + + 1.

Let candidate elements be the list of all meta elements that + meet the following criteria, in tree order:

+ + + + 2. For each element in candidate elements: + + 1.

Let value be the value of element's content attribute, + converted to [=ASCII lowercase=].

+ + 2.

If value is one of the values given in the first column of the following + table, then set value to the value given in the second column:

+ + + + + + + + + +
Legacy value + Referrer policy +
never + no-referrer +
default + no-referrer-when-downgrade +
always + unsafe-url +
origin-when-crossorigin + origin-when-cross-origin +
+ + 3.

If value is a referrer policy, then set element's + node document's referrer policy to policy.

+ + +

The fact that these steps are applied for each element enables deployment of + fallback values for older user agents. [[!REFERRERPOLICY]]

+ + +
Other metadata names
Extensions to the predefined set of metadata names may be registered in the diff --git a/sections/semantics-embedded-content.include b/sections/semantics-embedded-content.include index fe2142dee3..07a0dcf4d9 100644 --- a/sections/semantics-embedded-content.include +++ b/sections/semantics-embedded-content.include @@ -702,6 +702,7 @@
ismap - Whether the image is a server-side image map
width - Horizontal dimension
height - Vertical dimension
+
referrerpolicy - Referrer policy for fetches initiated by the element
<{img/longdesc}> - A url that provides a link to an expanded description of the image, defined in [[!html-longdesc]]
[=Allowed ARIA role attribute values=]:
presentation or none @@ -730,6 +731,7 @@ readonly attribute unsigned long naturalHeight; readonly attribute boolean complete; readonly attribute DOMString currentSrc; + attribute DOMString referrerPolicy; };
@@ -866,6 +868,9 @@ settings attribute. Its purpose is to allow images from third-party sites that allow cross-origin access to be used with <{canvas}>. + The referrerpolicy attribute is a referrer policy attribute. Its purpose is to + set the referrer policy used when fetching the image. [[!REFERRERPOLICY]] +
An <{img}> element has a current request and a pending request. @@ -1217,7 +1222,8 @@ ⌛ If the element uses srcset or picture, set request's initiator to "imageset". - ⌛ Set request's same-origin data-URL flag. + ⌛ Set request's referrer policy to the current state of the + element's referrerpolicy attribute. ⌛ Fetch request. Let this instance of the fetching algorithm be associated with @@ -2091,6 +2097,9 @@
  • Set request's client to client, type to "image", and set request's synchronous flag.
    • +
  • Set request's referrer policy to the current state of the + element's referrerpolicy attribute.
    • +
  • Let response be the result of fetching request.
  • If response's unsafe response is a network error or @@ -2296,6 +2305,9 @@ The isMap IDL attribute must reflect the ismap content attribute. + The referrerPolicy IDL attribute must + reflect the <{img/referrerpolicy}> content attribute, limited to only known values. + The longDesc IDL attribute is defined in [[!html-longdesc]]. The IDL attribute must reflect the <{img/longdesc}> content attribute. @@ -3573,6 +3585,7 @@ My <img src="heart.png" alt="heart"> breaks. to make payment requests
    width - Horizontal dimension
    height - Vertical dimension
    +
    referrerpolicy - Referrer policy for fetches initiated by the element
    [=Allowed ARIA role attribute values=]:
    application, document, or img.
    [=Allowed ARIA state and property attributes=]:
    @@ -3591,6 +3604,7 @@ My <img src="heart.png" alt="heart"> breaks. attribute boolean allowPaymentRequest; attribute DOMString width; attribute DOMString height; + attribute DOMString referrerPolicy; readonly attribute Document? contentDocument; readonly attribute WindowProxy? contentWindow; }; @@ -3766,7 +3780,10 @@ My <img src="heart.png" alt="heart"> breaks. "about:blank". Otherwise, let url be the resulting URL record. 2. If there exists an ancestor browsing context whose active document's [=Document/URL=], ignoring fragments, is equal to url, then abort these steps. - 3. Navigate the element's child browsing context to url. + 3.

    Let resource be a new [=request=] whose url is URL and whose + [=referrer policy=] is the current state of the + element's referrerpolicy content attribute.

    + 4. Navigate the element's child browsing context to resource. Furthermore, if the active document of the element's child browsing context before such a navigation was not completely loaded at the time of the new @@ -4027,6 +4044,10 @@ My <img src="heart.png" alt="heart"> breaks. create a nested browsing context, regardless of whether the specified initial contents are successfully used. + The referrerpolicy attribute is a referrer policy attribute. + Its purpose is to set the referrer policy used when processing the iframe attributes. + [[!REFERRERPOLICY]] +
    Descendants of <{iframe}> elements represent nothing. (In legacy user agents that do @@ -4063,6 +4084,9 @@ My <img src="heart.png" alt="heart"> breaks. The allowPaymentRequest IDL attribute must reflect the allowpaymentrequest content attribute. + The referrerPolicy IDL attribute must + reflect the referrerpolicy content attribute, limited to only known values. + The contentDocument IDL attribute must return the {{Document}} object of the active document of the <{iframe}> element's nested browsing context, if any and if its [=concept/origin=] is the @@ -11474,6 +11498,8 @@ red:89
    <{area/rel}> - Relationship of this document (or subsection/topic) to the destination resource
    shape - The kind of shape to be created in an image map
    target - browsing context for hyperlink navigation
    +
    type - Hint for the type of the referenced resource
    +
    referrerpolicy - Referrer policy for fetches initiated by the element
    [=Allowed ARIA role attribute values=]:
    link role (default - do not set).
    [=Allowed ARIA state and property attributes=]:
    @@ -11492,6 +11518,8 @@ red:89 attribute DOMString rel; [SameObject, PutForwards=value] readonly attribute DOMTokenList relList; attribute DOMString hreflang; + attribute DOMString type; + attribute DOMString referrerPolicy; }; HTMLAreaElement implements HTMLHyperlinkElementUtils; @@ -11590,7 +11618,9 @@ red:89 <{area}> element, as described in the next section, the href, target, and download attributes decide how the link is followed. The <{area/rel}>, and hreflang attributes may be used to indicate to the user the likely nature of the target resource before the user follows the link. - The target, download, <{area/rel}>, and hreflang attributes must be omitted if the href attribute is not present. + The target, download, <{area/rel}>, hreflang, + type, and referrerpolicy attributes must be omitted if the + href attribute is not present. The activation behavior of <{area}> elements is to run the following steps: @@ -11636,6 +11666,9 @@ red:89 The IDL attribute relList must reflect the <{links/rel}> content attribute. + The IDL attribute referrerPolicy must + reflect the <{link/referrerpolicy}> content attribute, limited to only known values. +
    The <{area}> element also supports the HTMLHyperlinkElementUtils interface. [[!URL]] diff --git a/sections/semantics-forms.include b/sections/semantics-forms.include index f5f2eb3238..2575ac707c 100644 --- a/sections/semantics-forms.include +++ b/sections/semantics-forms.include @@ -7427,7 +7427,7 @@ You cannot submit this form when the field is incorrect. user agent must send select update notifications. When the user agent is to send select update notifications, - queuea task to first fire a simple event that bubbles named input at the + queue a task to first fire a simple event that bubbles named input at the <{select}> element, and then fire a simple event that bubbles named change at the <{select}> element, using the user interaction task source as the task source. If the JavaScript execution context stack was not empty when the user agent was diff --git a/sections/semantics-links.include b/sections/semantics-links.include index c901b74ae1..5a5eff7cd1 100644 --- a/sections/semantics-links.include +++ b/sections/semantics-links.include @@ -175,6 +175,10 @@ resource, user agents must not use metadata included in the link to the resource to determine its type. + The referrerpolicy attribute is a referrer policy attribute. + Its purpose is to set the referrer policy used when following hyperlinks. + [[!REFERRERPOLICY]] +

    API for <{a}> and <{area}> elements

    @@ -701,8 +705,13 @@
 
     
  • If there is a hyperlink suffix, append it to URL.
    • 
 
+    
  • Let resource be a new [=request=] whose
+    url is URL
+    and whose [=referrer policy=] is the current state of subject's
+    referrerpolicy content attribute.
    • 
+
     
  • Queue a task to navigate the
-    target browsing context to URL. If replace is true,
+    target browsing context to resource. If replace is true,
     the navigation must be performed with replacement enabled. The source browsing
     context must be source.
    • 
 
diff --git a/sections/semantics-textlevel.include b/sections/semantics-textlevel.include
index a551204a9c..ffac533668 100644
--- a/sections/semantics-textlevel.include
+++ b/sections/semantics-textlevel.include
@@ -31,6 +31,7 @@
     
    <{a/rev}> — Reverse link relationship of the destination resource to this document (or subsection/topic)
    
     
    hreflang - Language of the linked resource
    
     
    type - Hint for the type of the referenced resource
    
+    
    referrerpolicy - Referrer policy for fetches initiated by the element
    
     
    [=Allowed ARIA role attribute values=]:
    
     
    
       link (default - do not set), button,
@@ -55,6 +56,7 @@
           attribute DOMString hreflang;
           attribute DOMString type;
           attribute DOMString text;
+          attribute DOMString referrerPolicy;
         };
         HTMLAnchorElement implements HTMLHyperlinkElementUtils;
    @@ -68,8 +70,9 @@ represents a placeholder for where a link might otherwise have been placed, if it had been relevant, consisting of just the element's contents. - The target, download, <{a/rel}>, <{a/rev}>, hreflang, and - type attributes must be omitted if the <{a/href}> attribute is not present. + The target, download, <{a/rel}>, <{a/rev}>, hreflang, + type, and referrerpolicy attributes must be omitted if the + <{a/href}> attribute is not present.
    @@ -88,11 +91,11 @@
    - The <{a/href}>, target, download, and attributes affect what - happens when users follow hyperlinks or download hyperlinks created using the - <{a}> element. The <{a/rel}>, <{a/rev}>, hreflang, and type - attributes may be used to indicate to the user the likely nature of the target resource before - the user follows the link. + The <{a/href}>, target, download, and referrerpolicy + attributes affect what happens when users follow hyperlinks or download hyperlinks + created using the <{a}> element. The <{a/rel}>, <{a/rev}>, hreflang, and + type attributes may be used to indicate to the user the likely nature of + the target resource before the user follows the link. The activation behavior of <{a}> elements that create hyperlinks is to run the following steps: @@ -142,6 +145,9 @@ The IDL attribute relList must reflect the <{a/rel}> content attribute. + The IDL attribute referrerPolicy must reflect the + referrerpolicy content attribute, limited to only known values. + The text IDL attribute, on getting, must return the same value as the {{Node/textContent}} IDL attribute on the element, and on setting, must act as if the {{Node/textContent}} IDL attribute on the element had been set to diff --git a/sections/webappapis.include b/sections/webappapis.include index 48c7eb4730..a5ff6b316f 100644 --- a/sections/webappapis.include +++ b/sections/webappapis.include @@ -146,6 +146,10 @@ :: An HTTPS state value representing the security properties of the network channel used to deliver the resource with which the environment settings object is associated. + : An referrer policy + :: The default referrer policy for fetches performed using this + environment settings object as a request client. [[!REFERRERPOLICY]] + An environment settings object also has an outstanding rejected promises weak set and an about-to-be-notified rejected promises list, used to track @@ -218,7 +222,7 @@ asynchronously complete with either null (on failure) or a new classic script (on success). - 1. Let request be a new request whose url is url, + 1. Let request be a new request whose URL is url, client is settings object, type is "script", destination is destination, referrer is referrer, mode is "same-origin", diff --git a/single-page.bs b/single-page.bs index 40fc311666..9c427a3cae 100644 --- a/single-page.bs +++ b/single-page.bs @@ -4,7 +4,7 @@ Title: HTML 5.2 Level: 5.2 Group: html Status: ED -Default Ref Status: snapshot +!Default Ref Status: snapshot TR: https://www.w3.org/TR/html52/ ED: https://w3c.github.io/html/ Repository: w3c/html @@ -1013,6 +1013,11 @@ spec:ecma-262; "title": "DOM XSLTProcessor", "href": "https://wiki.whatwg.org/wiki/DOM_XSLTProcessor", "publisher": "WHATWG" + }, + "REFERRERPOLICY": { + "title": "Referrer Policy", + "href": "https://www.w3.org/TR/referrer-policy", + "publisher": "W3C" } } diff --git a/styles/styles-html.css b/styles/styles-html.css index d133ef78a3..c29e532f8e 100644 --- a/styles/styles-html.css +++ b/styles/styles-html.css @@ -159,6 +159,7 @@ div.head .logo { float: right; margin: 0 1em; } div.head .logo img { border: none } /* remove border from top image */ div.head dl { margin: 1em 0; } div.head p.copyright, div.head p.alt { font-size: x-small; font-style: oblique; margin: 0; } +div.note:before { content: 'Note: '; font-weight: bolder;} body > .toc > li { margin-top: 1em; margin-bottom: 1em; } body > .toc.brief > li { margin-top: 0.35em; margin-bottom: 0.35em; }