From 479dfbf1ff68b746ed3f81cc7415165e3342709e Mon Sep 17 00:00:00 2001
From: Mike West frame-ancestors
directivereport-uri
directivesandbox
directiveWindow
.
Let CSP list be the CSP list + of the browsing context's active document.
Navigate the browsing context to a new response whose body is source and body is source, CSP list is CSP list and HTTPS state is HTTPS state, with replacement enabled and exceptions enabled. The source browsing context is that given to the overridden reload @@ -8223,6 +8230,9 @@ partial /*sealed*/ interface Document { }; Document implements GlobalEventHandlers; +
The Document
has a CSP list, which is a
+ list of Content Security Policy objects active in this context. The list is empty
+ unless otherwise specified.
about:srcdoc
, header list consists of
`Content-Type
`/`text/html
`, body is the value of the attribute, and HTTPS state is the body is the value of the attribute, CSP list is the CSP list of the iframe
element's node
+ document, and HTTPS state is the HTTPS state of the iframe
element's
node document's Window
.
@@ -82110,6 +82122,10 @@ State: <OUTPUT NAME=I>1</OUTPUT> <INPUT VALUE="Increment" TYPE=BUTTON O
state to the HTTPS state of the
resource used to generate the document.Execute the Initialise a Document
's CSP list
+ algorithm on the Document
object and the resource used to generate the document.
+
Set the document's referrer to the address of the resource from which
Request-URIs are obtained as determined when the fetch algorithm obtained the resource, if
that algorithm was used and determined such a value; otherwise, set it to the empty
@@ -94986,6 +95002,9 @@ interface WorkerGlobalScope : EventTarget {
"deprecated
", or "none
"). It is initially "none
".
+
A WorkerGlobalScope
object has an associated CSP list. It is initially an empty list.
+
The self
attribute must return the
WorkerGlobalScope
object itself.
Set worker global scope's CSP list to response's CSP list.
In the newly created execution environment, create a JavaScript global
environment whose global object is worker global scope. If worker
global scope is a DedicatedWorkerGlobalScope
object, then this is a