diff --git a/source b/source index 8e2b247e496..264a51dae0d 100644 --- a/source +++ b/source @@ -81047,7 +81047,8 @@ interface BarProp {
  1. Let coep be the result of obtaining a cross-origin embedder policy from response.

  2. + policy">obtaining a cross-origin embedder policy from response and + reservedEnvironment.

  3. If coep's value is "require-corp", then set policy's BarProp {

    1. Let coep be the result of obtaining a cross-origin embedder policy from response.

    2. + policy">obtaining a cross-origin embedder policy from response and + reservedEnvironment.

    3. If coep's value is "BarProp {


      To obtain an embedder policy from a response response:

      + data-x="concept-response">response response and an environment + environment:

      1. Let policy be a new embedder policy.

      2. +
      3. If environment is a non-secure context, then return + policy.

      4. +
      5. Let parsedItem be the result of getting a structured field value with `Cross-Origin-Embedder-Policy` and "item" from response's header list.

      6. @@ -82264,15 +82270,16 @@ interface BarProp {

        Embedder policy checks

        To check a navigation response's adherence to its embedder policy given a response response and a browsing context - target:

        + data-x="concept-response">response response, a browsing context + target, and an environment environment:

        1. If target is not a child browsing context, then return true.

        2. Let responsePolicy be the result of obtaining an embedder policy from response.

        3. + policy">obtaining an embedder policy from response and + environment.

        4. Let parentPolicy be target's container document's Location { // but see also Blocked", then set failure to true.

          -

          Otherwise, if the result of reserved environment is non-null and + the result of checking a navigation response's adherence to its embedder policy given - response and browsingContext is false, then set failure to - true.

          + response, browsingContext, and navigationParams's reserved environment is false, then set + failure to true.

          Otherwise, if the result of checking a navigation response's adherence to @@ -85149,10 +85159,14 @@ interface Location { // but see also response.

        5. -
        6. Set document's embedder - policy to the result of obtaining an embedder - policy from navigationParams's response.

        7. +
        8. If navigationParam's reserved environment is non-null, then set + document's embedder policy to + the result of obtaining an embedder policy given + navigationParams's response and + navigationParam's reserved + environment. Otherwise, set it to "unsafe-none".

        9. Initialize a Document's CSP list given document, navigationParams's SharedWorkerGlobalScope : WorkerGlobalScope {

        10. Otherwise, set worker global scope's embedder policy to the result of obtaining an embedder policy from - response.

        11. + response and inside settings.

        12. If worker global scope's