Skip to content

Commit

Permalink
Rearrange a bit to be symmetrical with COOP
Browse files Browse the repository at this point in the history
  • Loading branch information
@domenic
domenic committed Jun 24, 2020
1 parent 069e03f commit 770ea12
Showing 1 changed file with 66 additions and 60 deletions.
126 changes: 66 additions & 60 deletions source
View file
Original file line number Diff line number Diff line change
Expand Up @@ -80213,16 +80213,43 @@ interface <dfn>BarProp</dfn> {
`<code>Cross-Origin-Resource-Policy</code>` header.</p></dd>
</dl>

<p>An <dfn data-export="">embedder policy</dfn> consists of:</p>

<ul>
<li><p>A <dfn data-x="embedder-policy-value" data-dfn-for="embedder policy"
data-export="">value</dfn>, which is an <span>embedder policy value</span>, initially "<code
data-x="coep-unsafe-none">unsafe-none</code>".</p></li>

<li><p>A <dfn data-x="embedder-policy-reporting-endpoint" data-dfn-for="embedder policy"
data-export="">reporting endpoint</dfn> string, initially the empty string.</p></li>

<li><p>A <dfn data-x="embedder-policy-report-only-value" data-dfn-for="embedder policy"
data-export="">report only value</dfn>, which is an <span>embedder policy value</span>, initially
"<code data-x="coep-unsafe-none">unsafe-none</code>".</p></li>

<li><p>A <dfn data-x="embedder-policy-report-only-reporting-endpoint" data-dfn-for="embedder
policy" data-export="">report only reporting endpoint</dfn> string, initially the empty
string.</p></li>
</ul>

<p>The <dfn data-export="">"<code>coep</code>" report type</dfn> is a <span>report type</span>
whose value is "<code data-x="">coep</code>". It is <span>visible to
<code>ReportingObserver</code>s</span>.</p>

<h4>The headers</h4>

<p>The `<code>Cross-Origin-Embedder-Policy</code>` and
`<code>Cross-Origin-Embedder-Policy-Report-Only</code>` HTTP response header fields allow a server
to declare an <span>embedder policy</span> for an <span>environment settings object</span>. These
headers are <span data-x="http-structured-header">structured headers</span> whose values must be
<span data-x="http-structured-header-token">token</span>. The valid <span
<span data-x="http-structured-header-token">token</span>. <ref spec=STRUCTURED-HEADERS>

<p>The valid <span
data-x="http-structured-header-token">token</span> values are the <span data-x="embedder policy
value">embedder policy values</span>. The token may also have attached <span
data-x="http-structured-header-parameters">parameters</span>; of these, the "<dfn
data-x="coep-report-to"><code>report-to</code></dfn>" parameter can have a <span>valid URL
string</span> identifying an appropriate reporting endpoint. <ref spec=STRUCTURED-HEADERS> <ref
string</span> identifying an appropriate reporting endpoint. <ref
spec=REPORTING></p>

<div class="note">
Expand Down Expand Up @@ -80275,29 +80302,6 @@ interface <dfn>BarProp</dfn> {

<hr>

<p>An <dfn data-export="">embedder policy</dfn> consists of:</p>

<ul>
<li><p>A <dfn data-x="embedder-policy-value" data-dfn-for="embedder policy"
data-export="">value</dfn>, which is an <span>embedder policy value</span>, initially "<code
data-x="coep-unsafe-none">unsafe-none</code>".</p></li>

<li><p>A <dfn data-x="embedder-policy-reporting-endpoint" data-dfn-for="embedder policy"
data-export="">reporting endpoint</dfn> string, initially the empty string.</p></li>

<li><p>A <dfn data-x="embedder-policy-report-only-value" data-dfn-for="embedder policy"
data-export="">report only value</dfn>, which is an <span>embedder policy value</span>, initially
"<code data-x="coep-unsafe-none">unsafe-none</code>".</p></li>

<li><p>A <dfn data-x="embedder-policy-report-only-reporting-endpoint" data-dfn-for="embedder
policy" data-export="">report only reporting endpoint</dfn> string, initially the empty
string.</p></li>
</ul>

<p>The <dfn data-export="">"<code>coep</code>" report type</dfn> is a <span>report type</span>
whose value is "<code data-x="">coep</code>". It is <span>visible to
<code>ReportingObserver</code>s</span>.</p>

<p>To <dfn data-export="">obtain an embedder policy</dfn> from a <span
data-x="concept-response">response</span> <var>response</var>:</p>

Expand Down Expand Up @@ -80346,41 +80350,7 @@ interface <dfn>BarProp</dfn> {
<li><p>Return <var>policy</var>.</p></li>
</ol>

<p>To <dfn>queue a cross-origin embedder policy inheritance violation</dfn> given a <span
data-x="concept-response">response</span> <var>response</var>, a string <var>type</var>, a string
<var>endpoint</var>, and an <span>environment settings object</span> <var>settings</var>:</p>

<ol>
<li><p>Let <var>serialized</var> be the result of <span
data-x="serialize-a-response-url-for-reporting">serializing a response URL for
reporting</span> with <var>response</var>.</p></li>

<li>
<p>Let <var>body</var> be a new object containing the following properties:</p>

<table class="data">
<thead>
<tr>
<th>key</th>
<th>value</th>
</tr>
</thead>
<tbody>
<tr>
<td>type</td>
<td><var>type</var></td>
</tr>
<tr>
<td>blocked-url</td>
<td><var>serialized</var></td>
</tr>
</tbody>
</table>
</li>

<li><p><span data-x="queue a report">Queue</span> <var>body</var> as the
<span>"<code>coep</code>" report type</span> for <var>endpoint</var> on <var>settings</var>.
</ol>
<h4>Embedder policy checks</h4>

<p>To <dfn>check a navigation response's adherence to its embedder policy</dfn> given a <span
data-x="concept-response">response</span> <var>response</var> and a <span>browsing context</span>
Expand Down Expand Up @@ -80457,6 +80427,42 @@ interface <dfn>BarProp</dfn> {
<li><p>Return false.</p></li>
</ol>

<p>To <dfn>queue a cross-origin embedder policy inheritance violation</dfn> given a <span
data-x="concept-response">response</span> <var>response</var>, a string <var>type</var>, a string
<var>endpoint</var>, and an <span>environment settings object</span> <var>settings</var>:</p>

<ol>
<li><p>Let <var>serialized</var> be the result of <span
data-x="serialize-a-response-url-for-reporting">serializing a response URL for
reporting</span> with <var>response</var>.</p></li>

<li>
<p>Let <var>body</var> be a new object containing the following properties:</p>

<table class="data">
<thead>
<tr>
<th>key</th>
<th>value</th>
</tr>
</thead>
<tbody>
<tr>
<td>type</td>
<td><var>type</var></td>
</tr>
<tr>
<td>blocked-url</td>
<td><var>serialized</var></td>
</tr>
</tbody>
</table>
</li>

<li><p><span data-x="queue a report">Queue</span> <var>body</var> as the
<span>"<code>coep</code>" report type</span> for <var>endpoint</var> on <var>settings</var>.
</ol>



<h3 split-filename="history" id="history">Session history and navigation</h3>
Expand Down

0 comments on commit 770ea12

Please sign in to comment.