From f21bb0a11ef3b3e7078148046e15c3ee7af321e3 Mon Sep 17 00:00:00 2001 From: Yutaka Hirano Date: Fri, 21 Aug 2020 23:57:28 +0900 Subject: [PATCH] Augment COEP violation report * Rename "blocked-url" to "blockedURL"; fixes #5818. * Add "disposition" and "destination"; closes #5391. --- source | 27 +++++++++++++++++---------- 1 file changed, 17 insertions(+), 10 deletions(-) diff --git a/source b/source index 62168b685e8..288905f36a2 100644 --- a/source +++ b/source @@ -80676,7 +80676,7 @@ interface BarProp { data-x="coep-unsafe-none">unsafe-none", then queue a cross-origin embedder policy inheritance violation with response, "navigation", parentPolicy's report - only reporting endpoint, and target's , "reporting", and target's container document's relevant settings object.

@@ -80687,7 +80687,8 @@ interface BarProp {
  • Queue a cross-origin embedder policy inheritance violation with response, "navigation", parentPolicy's reporting endpoint, and target's + data-x="embedder-policy-reporting-endpoint">reporting endpoint, + "enforce", and target's container document's relevant settings object.

  • @@ -80715,7 +80716,7 @@ interface BarProp { inheritance violation
    with response, "worker initialization", owner's policy's report only reporting endpoint, - and owner.

    + "reporting", and owner.

  • If ownerPolicy's value is "unsafe-none" or policy's BarProp {

  • Queue a cross-origin embedder policy inheritance violation with response, "worker initialization", owner's policy's - reporting endpoint, and - owner.

  • + reporting endpoint, + "enforce", and owner.

  • Return false.

  • To queue a cross-origin embedder policy inheritance violation given a response response, a string type, a string - endpoint, and an environment settings object settings:

    + endpoint, a string disposition, and an environment settings + object settings:

    1. Let serialized be the result of BarProp { type - blocked-url + blockedURL serialized + + disposition + disposition +

    2. @@ -82893,7 +82899,7 @@ interface Location { // but see also url, finalSandboxFlags, incumbentNavigationOrigin, and activeDocumentNavigationOrigin.

      @@ -82931,8 +82937,9 @@ interface Location { // but see also
      container document's origin, browsingContext's container - document's relevant settings object, response, and true is - blocked, then set response to a network error and + document's relevant settings object, request's destination, response, and true + is blocked, then set response to a network error and break.

      Here we're running the cross-origin resource policy check