From 8f04218abb7ac3ec2c81d0bf1d40c0de24ab0ad7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Philip=20J=C3=A4genstedt?= <philip@foolip.org>
Date: Fri, 19 Jul 2024 13:09:39 +0200
Subject: [PATCH] Update initial support for <iframe sandbox> in WebKit

This was implemented without a flag, and with the reflected IDL
attribute, in WebKit 532.6:
https://github.com/WebKit/WebKit/commit/c205c4e7d40da38c5009df548c2316a358a4fca7
https://github.com/WebKit/WebKit/blob/c205c4e7d40da38c5009df548c2316a358a4fca7/WebCore/Configurations/Version.xcconfig

That maps to Chrome 5 + Safari 5 + iOS 4, which also matches exactly
earlier updates based on collector test results:
https://github.com/mdn/browser-compat-data/pull/7243
https://github.com/mdn/browser-compat-data/pull/7290
https://github.com/mdn/browser-compat-data/pull/7402

The handled attribute tokens were "allow-same-origin", "allow-forms",
and "allow-scripts", so update that data to match.

The "allow-popups" entry was bumped to pass the lint.
---
 html/elements/iframe.json | 33 +++++++++++++++++++++------------
 1 file changed, 21 insertions(+), 12 deletions(-)

diff --git a/html/elements/iframe.json b/html/elements/iframe.json
index 93eee267ddf4fa..d856e0112ddaf4 100644
--- a/html/elements/iframe.json
+++ b/html/elements/iframe.json
@@ -701,7 +701,7 @@
             "spec_url": "https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-sandbox",
             "support": {
               "chrome": {
-                "version_added": "4"
+                "version_added": "5"
               },
               "chrome_android": "mirror",
               "edge": {
@@ -720,7 +720,9 @@
               "safari": {
                 "version_added": "5"
               },
-              "safari_ios": "mirror",
+              "safari_ios": {
+                "version_added": "4"
+              },
               "samsunginternet_android": "mirror",
               "webview_android": "mirror"
             },
@@ -770,7 +772,7 @@
               "spec_url": "https://html.spec.whatwg.org/multipage/browsers.html#attr-iframe-sandbox-allow-forms",
               "support": {
                 "chrome": {
-                  "version_added": "≤49"
+                  "version_added": "5"
                 },
                 "chrome_android": "mirror",
                 "edge": "mirror",
@@ -785,9 +787,11 @@
                 "opera": "mirror",
                 "opera_android": "mirror",
                 "safari": {
-                  "version_added": "≤10.1"
+                  "version_added": "5"
+                },
+                "safari_ios": {
+                  "version_added": "4"
                 },
-                "safari_ios": "mirror",
                 "samsunginternet_android": "mirror",
                 "webview_android": "mirror"
               },
@@ -909,7 +913,7 @@
               "spec_url": "https://html.spec.whatwg.org/multipage/browsers.html#attr-iframe-sandbox-allow-popups",
               "support": {
                 "chrome": {
-                  "version_added": "4"
+                  "version_added": "5"
                 },
                 "chrome_android": "mirror",
                 "edge": {
@@ -1017,7 +1021,7 @@
               "spec_url": "https://html.spec.whatwg.org/multipage/browsers.html#attr-iframe-sandbox-allow-same-origin",
               "support": {
                 "chrome": {
-                  "version_added": "≤49",
+                  "version_added": "5",
                   "notes": "Chrome 70 and earlier block script execution without <code>allow-scripts</code>, even if <code>allow-same-origin</code> is set. For example, any bound handlers for click events of nodes inside an iframe throw an error for blocked script execution."
                 },
                 "chrome_android": "mirror",
@@ -1033,10 +1037,13 @@
                 "opera": "mirror",
                 "opera_android": "mirror",
                 "safari": {
-                  "version_added": "≤10.1",
+                  "version_added": "5",
+                  "notes": "Safari blocks script execution without <code>allow-scripts</code> even if <code>allow-same-origin</code> is set. For example, any bound handlers for click events of nodes inside an iframe throw an error for blocked script execution."
+                },
+                "safari_ios": {
+                  "version_added": "4",
                   "notes": "Safari blocks script execution without <code>allow-scripts</code> even if <code>allow-same-origin</code> is set. For example, any bound handlers for click events of nodes inside an iframe throw an error for blocked script execution."
                 },
-                "safari_ios": "mirror",
                 "samsunginternet_android": "mirror",
                 "webview_android": "mirror"
               },
@@ -1053,7 +1060,7 @@
               "spec_url": "https://html.spec.whatwg.org/multipage/browsers.html#attr-iframe-sandbox-allow-scripts",
               "support": {
                 "chrome": {
-                  "version_added": "≤49"
+                  "version_added": "5"
                 },
                 "chrome_android": "mirror",
                 "edge": "mirror",
@@ -1068,9 +1075,11 @@
                 "opera": "mirror",
                 "opera_android": "mirror",
                 "safari": {
-                  "version_added": "≤10.1"
+                  "version_added": "5"
+                },
+                "safari_ios": {
+                  "version_added": "4"
                 },
-                "safari_ios": "mirror",
                 "samsunginternet_android": "mirror",
                 "webview_android": "mirror"
               },