Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ignore COEP on non-secure contexts #6336

Merged
merged 3 commits into from
Feb 2, 2021
Merged

Ignore COEP on non-secure contexts #6336

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
810bb7e
Ignore COEP on non-secure contexts
Jan 28, 2021
ea9ea8c
fix
Jan 28, 2021
bfc3cff
NIts
domenic Feb 2, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
42 changes: 28 additions & 14 deletions source
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81047,7 +81047,8 @@ interface <dfn>BarProp</dfn> {

<ol>
<li><p>Let <var>coep</var> be the result of <span data-x="obtain an embedder
policy">obtaining a cross-origin embedder policy</span> from <var>response</var>.</p></li>
policy">obtaining a cross-origin embedder policy</span> from <var>response</var> and
<var>reservedEnvironment</var>.</p></li>

<li><p>If <var>coep</var>'s <span data-x="embedder-policy-value">value</span> is "<code
data-x="coep-require-corp">require-corp</code>", then set <var>policy</var>'s <span
Expand Down Expand Up @@ -81087,7 +81088,8 @@ interface <dfn>BarProp</dfn> {

<ol>
<li><p>Let <var>coep</var> be the result of <span data-x="obtain an embedder
policy">obtaining a cross-origin embedder policy</span> from <var>response</var>.</p></li>
policy">obtaining a cross-origin embedder policy</span> from <var>response</var> and
<var>reservedEnvironment</var>.</p></li>

<li>
<p>If <var>coep</var>'s <span data-x="embedder-policy-value">value</span> is "<code
Expand Down Expand Up @@ -82214,11 +82216,15 @@ interface <dfn>BarProp</dfn> {
<hr>

<p>To <dfn export>obtain an embedder policy</dfn> from a <span
data-x="concept-response">response</span> <var>response</var>:</p>
data-x="concept-response">response</span> <var>response</var> and an <span>environment</span>
<var>environment</var>:</p>

<ol>
<li><p>Let <var>policy</var> be a new <span>embedder policy</span>.</p></li>

<li><p>If <var>environment</var> is a <span>non-secure context</span>, then return
<var>policy</var>.</p></li>

<li><p>Let <var>parsedItem</var> be the result of <span>getting a structured field value</span>
with `<code>Cross-Origin-Embedder-Policy</code>` and "<code data-x="">item</code>" from
<var>response</var>'s <span data-x="concept-response-header-list">header list</span>.</p></li>
Expand Down Expand Up @@ -82264,15 +82270,16 @@ interface <dfn>BarProp</dfn> {
<h4>Embedder policy checks</h4>

<p>To <dfn>check a navigation response's adherence to its embedder policy</dfn> given a <span
data-x="concept-response">response</span> <var>response</var> and a <span>browsing context</span>
<var>target</var>:</p>
data-x="concept-response">response</span> <var>response</var>, a <span>browsing context</span>
<var>target</var>, and an <span>environment</span> <var>environment</var>:</p>

<ol>
<li><p>If <var>target</var> is not a <span>child browsing context</span>, then return
true.</p></li>

<li><p>Let <var>responsePolicy</var> be the result of <span data-x="obtain an embedder
policy">obtaining an embedder policy</span> from <var>response</var>.</p></li>
policy">obtaining an embedder policy</span> from <var>response</var> and
<var>environment</var>.</p></li>

<li><p>Let <var>parentPolicy</var> be <var>target</var>'s <span
data-x="bc-container-document">container document</span>'s <span
Expand Down Expand Up @@ -84755,10 +84762,13 @@ interface <dfn>Location</dfn> { // but see also <a href="#the-location-interface
<var>navigationType</var>, and <var>browsingContext</var> is "<code data-x="">Blocked</code>",
then set <var>failure</var> to true. <ref spec="CSP"></p>

<p>Otherwise, if the result of <span data-x="check a navigation response's adherence to its
<p>Otherwise, if <var>navigationParams</var>'s <span
data-x="navigation-params-reserved-environment">reserved environment</span> is non-null and
the result of <span data-x="check a navigation response's adherence to its
embedder policy">checking a navigation response's adherence to its embedder policy</span> given
<var>response</var> and <var>browsingContext</var> is false, then set <var>failure</var> to
true.</p>
<var>response</var>, <var>browsingContext</var>, and <var>navigationParams</var>'s <span
data-x="navigation-params-reserved-environment">reserved environment</span> is false, then set
<var>failure</var> to true.</p>

<p>Otherwise, if the result of <span data-x="check a navigation response's adherence to
`X-Frame-Options`">checking a navigation response's adherence to
Expand Down Expand Up @@ -85149,10 +85159,14 @@ interface <dfn>Location</dfn> { // but see also <a href="#the-location-interface
`<code>Referrer-Policy</code>` header</span> of <var>navigationParams</var>'s <span
data-x="navigation-params-response">response</span>. <ref spec="REFERRERPOLICY"></p></li>

<li><p>Set <var>document</var>'s <span data-x="concept-document-embedder-policy">embedder
policy</span> to the result of <span data-x="obtain an embedder policy">obtaining an embedder
policy</span> from <var>navigationParams</var>'s <span
data-x="navigation-params-response">response</span>.</p></li>
<li><p>If <var>navigationParam</var>'s <span
data-x="navigation-params-reserved-environment">reserved environment</span> is non-null, then set
<var>document</var>'s <span data-x="concept-document-embedder-policy">embedder policy</span> to
the result of <span data-x="obtain an embedder policy">obtaining an embedder policy</span> given
<var>navigationParams</var>'s <span data-x="navigation-params-response">response</span> and
<var>navigationParam</var>'s <span data-x="navigation-params-reserved-environment">reserved
environment</span>. Otherwise, set it to "<code
data-x="coep-unsafe-none">unsafe-none</code>".</p></li>

<li><p><span>Initialize a <code data-x="">Document</code>'s CSP list</span> given
<var>document</var>, <var>navigationParams</var>'s <span
Expand Down Expand Up @@ -99308,7 +99322,7 @@ interface <dfn>SharedWorkerGlobalScope</dfn> : <span>WorkerGlobalScope</span> {
<li><p>Otherwise, set <var>worker global scope</var>'s <span
data-x="concept-WorkerGlobalScope-embedder-policy">embedder policy</span> to the result of
<span data-x="obtain an embedder policy">obtaining an embedder policy</span> from
<var>response</var>.</p></li>
<var>response</var> and <var>inside settings</var>.</p></li>

<li>
<p>If <var>worker global scope</var>'s <span
Expand Down