Nested browsing context navigation to non-network schemes

[shekyan]

I saw this topic , which ensured me, that change to the spec we did is in right direction.
However, the question prompted me to check if sandboxed origin browsing context has control over navigation to non-network schemes, and I was surprised to see that there is no control over that capability.

I think that limiting nested browsing context navigation to the defined set of schemes is in immediate CSP interest, or perhaps fetch? Can we do something in CSPland to have that capability?

[mikewest]

I don't really understand what you're asking for. Could you be a little more concrete with your suggestion?

[shekyan]

I ask if requiring parent context to opt-in to allow navigating iframes to non-network schemes is sane idea or not (if it both fits CSP roadmap and is technically possible to implement by browsers without rewriting everything).

[mikewest]

Duping this into #125.