From 25e85018cb7bd54c15bc3d4affb38cba13cb52f7 Mon Sep 17 00:00:00 2001 From: clamy Date: Wed, 10 Jun 2020 16:09:39 +0200 Subject: [PATCH] Add cross-origin oepner policy reporting API --- source | 649 ++++++++++++++++++++++++++++++++++++++++++++++----------- 1 file changed, 526 insertions(+), 123 deletions(-) diff --git a/source b/source index 11581cbdbac..0cfcb00b0ea 100644 --- a/source +++ b/source @@ -3943,6 +3943,18 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute + + +
Reporting
+ +
+

The following feature is defined in Reporting API:

+ +
@@ -9040,8 +9052,7 @@ partial interface Document { which is a module map, initially empty.

The Document has a cross-origin opener - policy, which is a cross-origin opener policy, initially "unsafe-none".

+ policy, which is a cross-origin opener policy.

The DocumentOrShadowRoot interface

@@ -76652,6 +76663,15 @@ popup4.close(); active document's cross-origin opener policy.

+

  • Let coop be a new cross-origin opener policy.

    • + +

  • If creator is non-null and creator's origin is + same origin with creator's relevant settings object's + top-level origin, then set coop to creator's browsing context's top-level browsing context's + active document's cross-origin opener + policy.

    • +

  • Let document be a new Document, marked as an HTML document in quirks mode, whose content type is "text/html", @@ -77511,10 +77531,10 @@ console.assert(iframeWindow.frameElement === null);

    1. -

      If current's top-level browsing context's active - document's cross-origin opener policy is - "same-origin" or "same-origin-plus-COEP", then:

      +

      If current's top-level browsing context's active + document's cross-origin opener policy's + value is "same-origin" or + "same-origin-plus-COEP", then:

      1. Let currentDocument be current's active @@ -79968,10 +79988,30 @@ interface BarProp {

        Cross-origin opener policies

        +

        Cross-origin opener policy

        +

        A cross-origin opener policy allows a document which is navigated to in a top-level browsing context to force the creation of a new top-level browsing - context, and a corresponding group. It has one of the - following values:

        + context, and a corresponding group. The cross-origin + opener policy consists of:

        + +
          +

        1. A cross-origin opener policy value + (value), initially "unsafe-none".

          2. + +

        2. A string or null (reporting + endpoint), initially null.

          3. + +

        3. A cross-origin opener policy value + (report only value), initially "unsafe-none".

          4. + +

        4. A string or null (report only reporting endpoint), initially null.

          5. +
        + +

        The cross-origin opener policy value consists of the following:

        "unsafe-none"
        @@ -80008,10 +80048,10 @@ interface BarProp {
    -

    To match cross-origin opener policies, given a - cross-origin opener policy A, an origin originA, a - cross-origin opener policy B, and an origin - originB:

    +

    To match cross-origin opener policy values, given a cross-origin opener policy value A, an + origin originA, a >cross-origin opener + policy value B, and an origin originB:

    1. If A is "unsafe-none" and B @@ -80026,13 +80066,15 @@ interface BarProp {

    2. Return false.

    -

    Cross-Origin-Opener-Policy header

    +

    Cross-Origin-Opener-Policy headers

    A Document's cross-origin opener policy is derived from the `Cross-Origin-Opener-Policy` HTTP response header. - This header is a structured header whose value must - be a token.

    + data-x="http-cross-origin-opener-policy">Cross-Origin-Opener-Policy` and the `Cross-Origin-Opener-Policy-Report-Only` + HTTP response headers. These headers are structured + headers whose value must be a token. +

    The valid token values are "unsafe-none", "BarProp { data-x="concept-response">response response:

      +

    1. Let policy be a new cross-origin opener policy.

      2. +

    2. Let securityState be the result of executing Is url potentially trustworthy? on response's url.

    3. If securityState is "Not Trustworthy", then return - "unsafe-none".

      4. + policy.

    4. Let value be the result of getting a structured header @@ -80063,40 +80107,196 @@ interface BarProp { "item" from response's header list.

      5. -

    5. If value is failure or null, then return "unsafe-none".

      6. +
    6. +

      If value is not failure and is not null, then:

      -

    7. If value[0] is not "same-origin" or - "same-origin-allow-popups", then return - "unsafe-none".

      8. +
        +
      1. +

        If value bare item is "same-origin", then:

        -
      2. -

        If value[0] is "same-origin", then:

        +
          +

        1. Let coep be the result of obtaining a cross-origin embedder + policy from response.

          2. + +

        2. If coep's value is + "require-corp", then set policy value to "same-origin-plus-COEP".

          3. + +

        3. Else, set policy value to "same-origin".

          4. +
        +
        3. + +

      3. If value bare item is "same-origin-allow-popups", + then set policy value to "same-origin-allow-popups".

        4. + +

      4. If value's parameters["report-to"] exists and it is a string, then set reporting endpoint to + value's parameters["report-to"].

        5. +
      + + +

    8. Let reportOnlyValue be the result of getting a structured header + given `Cross-Origin-Opener-Policy-Report-Only` and + "item" from response's header list.

      9. +
    9. +

      If reportOnlyValue is not failure and is not null, then:

        -

      1. Let coep be the result of obtaining a cross-origin embedder - policy from response.

        2. +
      2. +

        If reportOnlyValue bare item is "same-origin", then:

        + +
          +

        1. Let coep be the result of obtaining a cross-origin embedder + policy from response.

          2. + +
        2. +

          If coep's value is + "require-corp" or coep's report only value is "require-corp", then set policy report only value to "same-origin-plus-COEP".

          + +

          Report only COOP also considers report only COEP to assign the special "same-origin-plus-coep" value. This allows developers more freedom in the + order of deployment of COOP and COEP.

          +
          3. + +

        3. Else, set policy report only + value to "same-origin".

          4. +
        +
        3. + +

      3. If reportOnlyValue bare item is "same-origin-allow-popups", then set policy report only value to "same-origin-allow-popups".

        4. -

      4. If coep is "require-corp", then return "same-origin-plus-COEP".

        5. +

      5. If reportOnlyValue's parameters["report-to"] exists and it is a string, then set report only reporting endpoint to + reportOnlyValue's parameters["report-to"].

      10. -

    10. Return value[0].

      11. +

    11. Return policy.

    +

    Browsing context group switches due to cross-origin opener policy

    +

    To check if a cross-origin opener + policy value requires a browsing context group switch, given a boolean + isInitialEmptyDocument, two origins + responseOrigin, activeDocumentNavigationOrigin, and two cross-origin opener policy values responseCOOPValue, + activeDocumentCOOPValue:

    + +
      +

    1. If the result of matching + activeDocumentCOOPValue, activeDocumentNavigationOrigin, + responseCOOPValue and responseOrigin is true, return + false.

      2. + +
    2. +

      If all of the following are true:

      + +
        +

      • isInitialEmptyDocument.

        • + +

      • activeDocumentCOOPValue's value is "same-origin-allow-popups".

        • + +

      • responseCOOPValue is "unsafe-none".

        • +
      + +

      then return false.

      +
      3. + +

    3. Return true.

      +
    + +

    To check if enforcing report only COOP + policies would require a browsing context group switch, given a boolean + isInitialEmptyDocument, two origins + responseOrigin, activeDocumentNavigationOrigin, and two cross-origin opener policies responseCOOP, + and ActiveDocumentCOOP:

    + +
      +
    1. +

      If the result of checking if + the navigation requires a browsing context group switch given + isInitialEmptyDocument, sandboxFlags, responseOrigin, + activeDocumentNavigationOrigin, responseCOOP's report-only value and + ActiveDocumentCOOPReportOnly's report-only value is false, + return false.

      + +

      Matching report only policies allows a website to specify the same report only + Cross-Origin-Opener-Policy on all its pages and not receive violation reports for navigations + between these pages.

      +
      2. + +

    2. If the result of checking if the navigation requires a + browsing context group switch given isInitialEmptyDocument, + sandboxFlags, responseOrigin, activeDocumentNavigationOrigin, + responseCOOP's value and + ActiveDocumentCOOPReportOnly's report-only + value is true, return true.

      3. + +

    3. If the result of checking if the navigation requires a + browsing context group switch given isInitialEmptyDocument, + sandboxFlags, responseOrigin, activeDocumentNavigationOrigin, + responseCOOP's report-only value + and ActiveDocumentCOOPReportOnly's value is + true, return true.

      4. + +

    4. Return false.

      5. +
    + +

    A cross-origin opener policy enforcement result is + a struct composed of:

    + +
      +

    • A boolean needBrowsingContextGroupSwitch, initially false.

      • + +

    • A boolean needBrowsingContextGroupSwitchReportOnly, initially false.

      • + +

    • A boolean sameOriginWithPreviousDocumentIncludingRedirects, initally true.

      • +
    +

    To check if a response requires a browsing context group switch, given a browsing context - browsingContext, an origin responseOrigin and a - cross-origin opener policy responseCOOP, run the followign steps:

    + browsingContext, an origin responseOrigin, a + cross-origin opener policy responseCOOP, and a cross-origin opener policy enforcement result + currentCOOPEnforcementResult, run the followign steps:

    1. Let activeDocumentNavigationOrigin be browsingContext's active document's origin.

      2. +

    2. If activeDocumentNavigationOrigin is not same origin with + responseOrigin, set currentCOOPEnforcementResult's + sameOriginWithPreviousDocumentIncludingRedirects to false.

      3. +

    3. Let activeDocumentCOOP be browsingContext's active document's cross-origin opener policy.

      4. @@ -80108,41 +80308,128 @@ interface BarProp { created, then set isInitialAboutBlank to true.

      -

    4. If the result of matching - activeDocumentCOOP, activeDocumentNavigationOrigin, - responseCOOP and responseOrigin is true, then return false.

      5. - -
    5. -

      If all of the following are true:

      - -
        -

      • isInitialAboutBlank

        • +

      • If the result of checking if + the COOP values require a browsing context group switch given + isInitialAboutBlank, activeDocumentCOOP's value, activeDocumentNavigationOrigin, + responseCOOP's value and + responseOrigin is true, set currentCOOPEnforcementResult's + needBrowsingContextGroupSwitch to true.

        • -

      • activeDocumentCOOP is "same-origin-allow-popups".

        • +

      • If the result of checking if + enforcing report only COOP policies would require a browsing context group switch given + isInitialAboutBlank, responseOrigin, + activeDocumentNavigationOrigin, responseCOOP, and + activeDocumentCOOP, is true, set currentCOOPEnforcementResult's + needBrowsingContextGroupSwitchReportOnly to true.

        • -

      • responseCOOP is "unsafe-none".

        • -
      +
    6. +

      If browsingContext's browsing context group's browsing + context set's size is strictly greater than 1, then:

      -

      then return false.

      +
        +
      1. If

        navigationCOOP's reporting endpoint is not null and currentCOOPEnforcementResult's + needBrowsingContextGroupSwitch is true, queue a violation report for browsing context group switch + when navigating to a COOP page with navigationCOOP's reporting endpoint, navigationCOOP's + value, "enforce", + response's URL, + browsingContext's active document's URL, + request's referrer, and + currentCOOPEnforcementResult's + sameOriginWithPreviousDocumentIncludingRedirects.

        2. + +

      2. If navigationCOOP's report only reporting endpoint is not null and currentCOOPEnforcementResult's + needBrowsingContextGroupSwitchReportOnly, queue a violation report for browsing context group switch + when navigating to a COOP page with navigationCOOP's report only reporting endpoint, + navigationCOOP's report only + value, "reporting", response's URL, browsingContext's active + document's URL, and request's referrer.

        3. +
      7. - -

    7. Return true.

    To obtain a browsing context to use for a navigation response, given a browsing context - browsingContext, a sandboxing flag set sandboxFlags, and a - cross-origin opener policy navigationCOOP:

    + browsingContext, a sandboxing flag set sandboxFlags, a + cross-origin opener policy navigationCOOP and a cross-origin opener policy enforcement result + COOPEnforcementResult:

    1. Assert browsingContext is a top-level browsing context.

      2. +

    2. Let activeDocumentCOOP be browsingContext's active + document's cross-origin opener + policy.

      3. + +
    3. +

      If COOPEnforcementResult's needBrowsingContextGroupSwitchReportOnly + is true and browsingContext's browsing context + group's browsing context set's size is + strictly greater than 1, and activeDocumentCOOP's report only reporting endpoint is not null, then:

      + +
        +

      1. Let initialNavigationURL be a new empty URL.

        2. + +

      2. If source and browsingContext are the same, set + initialNavigationURL to request's URL.

        3. + +

      3. Queue a violation report for + browsing context group switch when navigating away from a COOP page with + activeDocumentCOOP's report only + reporting endpoint, activeDocumentCOOP's report only value, "reporting", response's URL, browsingContext's active + document's URL, and initialNavigationURL.

        4. +
      +
      4. + +

    4. If COOPEnforcementResult's needBrowsingContextGroupSwitch is false, return browsingContext. + +

    5. +

      If browsingContext's browsing context group's browsing context + set's size is strictly greater than 1, and activeDocumentCOOP's reporting endpoint is not null, then:

      + +
        +

      1. Let initialNavigationURL be a new empty URL.

        2. + +

      2. If source and browsingContext are the same, set + initialNavigationURL to request's URL.

        3. + +

      3. Queue a violation report for + browsing context group switch when navigating away from a COOP page with + activeDocumentCOOP's reporting + endpoint, activeDocumentCOOP's value, + "enforce", response's URL, browsingContext's active + document's URL, and initialNavigationURL.

        4. +
      +
      6. +

    6. Let newBrowsingContext be the result of creating a new top-level browsing context.

      7. -

    7. If navigationCOOP is "

      If navigationCOOP's value is "same-origin-plus-COEP", then set newBrowsingContext's group's cross-origin isolated to true.

      8. @@ -80150,8 +80437,8 @@ interface BarProp {

    8. If sandboxFlags is not empty, then:

        -

      1. Assert: navigationCOOP is "unsafe-none".

        2. +

      2. Assert navigationCOOP's value is + "unsafe-none".

      3. Set newBrowsingContext's sandboxing flag set to sandboxFlags.

        4. @@ -80173,6 +80460,90 @@ interface BarProp { defined. It is currently under discussion in issue #5350.

        +

        Reporting policies

        + +

        To queue a violation report for browsing context group + switch when navigating to a COOP page given a string endpoint, a cross-origin opener policy value + COOPValue, a string disposition, a URL + navigationURL, a URL currentDocumentURL, and a + referrer referrer:

        + +

          +

        1. Let previousDocumentURL be referrer.

          2. + +

        2. If currentDocumentURL and navigationURL are + same origin, set previousDocumentURL to + currentDocumentURL.

          3. + +

        3. Set previousDocumentURL's username + to the empty string, and its password to null.

          4. + +

        4. Let serializedPreviousDocumentURL be the result of executing the URL serializer on previousDocumentURL with the + exclude fragment flag set.

          5. + +
        5. +

          Let body be a new object containing the following properties with keys:

          + +
            +

          • key: "disposition", value: disposition.

            • + +

          • key: "effective-policy", value: COOPValue.

            • + +

          • key: "navigation-uri", value: + serializedPreviousDocumentURL.

            • + +

          • key: "violation-type", value: "navigate-to-document".

            • +
          +
          6. + +

        6. Queue body as "coop" + for endpoint with navigationURL.

          7. +
        + +

        To queue a violation report for browsing context group + switch when navigating away from a COOP page given a string endpoint, a + cross-origin opener policy value COOPValue, a string + disposition, a URL navigationURL, a URL + currentDocumentURL, and a URL initialNavigationURL:

        + +

          +

        1. Let nextDocumentURL be initialNavigationURL.

          2. + +

        2. If currentDocumentURL and navigationURL are + same origin, set nextDocumentURL to + navigationURL.

          3. + +

        3. Set nextDocumentURL's username to + the empty string, and its password to null.

          4. + +

        4. Let serializedNextDocumentURL be the result of executing the URL serializer on nextDocumentURL with the + exclude fragment flag set.

          5. + +
        5. +

          Let body be a new object containing the following properties with keys:

          + +
            +

          • key: "disposition", value: disposition.

            • + +

          • key: "effective-policy", value: COOPValue.

            • + +

          • key: "navigation-uri", value: + serializedNextDocumentURL.

            • + +

          • key: "violation-type", value: "navigate-from-document".

            • +
          +
          6. + +

        6. Queue body as "coop" + for endpoint with currentDocumentURL.

          7. +

        Session history and navigation

        @@ -82443,20 +82814,20 @@ interface Location { // but see also
        an HTML MIME type
        Follow the steps given in the HTML document section - providing browsingContext, request, response, - finalSandboxFlags, finalResponseOrigin, + providing source, browsingContext, type, request, + response, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, - reservedEnvironment, responseCOOP, and - browsingContextSwitchNeeded. Once the steps have completed, return.
        + reservedEnvironment, responseCOOP and COOPEnforcementResult. + Once the steps have completed, return.
        an XML MIME type that is not an explicitly supported XML MIME type
        Follow the steps given in the XML document section - providing browsingContext, type, request, response, - finalSandboxFlags, finalResponseOrigin, + providing source, browsingContext, type, request, + response, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, - reservedEnvironment, responseCOOP, and - browsingContextSwitchNeeded. Once the steps have completed, return.
        + reservedEnvironment, responseCOOP, and COOPEnforcementResult. + Once the steps have completed, return.
        a JavaScript MIME type
        a JSON MIME type that is not an explicitly supported JSON MIME @@ -82466,37 +82837,37 @@ interface Location { // but see also text/plain"
        "text/vtt"
        Follow the steps given in the plain text file section - providing browsingContext, type, request, response, - finalSandboxFlags,finalResponseOrigin, + providing source, browsingContext, type, request, + response, finalSandboxFlags,finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, - reservedEnvironment, responseCOOP, and - browsingContextSwitchNeeded. Once the steps have completed, return.
        + reservedEnvironment, responseCOOP, and COOPEnforcementResult. + Once the steps have completed, return.
        "multipart/x-mixed-replace"
        Follow the steps given in the multipart/x-mixed-replace section providing - browsingContext, type, request, response, + source, browsingContext, type, request, response, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, reservedEnvironment, responseCOOP, and - browsingContextSwitchNeeded. Once the steps have completed, return.
        + COOPEnforcementResult. Once the steps have completed, return.
        A supported image, video, or audio type
        Follow the steps given in the media section providing - browsingContext, type, request, response, - finalSandboxFlags, finalResponseOrigin, + source, browsingContext, type, request, + response, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, - reservedEnvironment, responseCOOP, and - browsingContextSwitchNeeded. Once the steps have completed, return.
        + reservedEnvironment, responseCOOP, and COOPenforcementResult. + Once the steps have completed, return.
        A type that will use an external application to render the content in browsingContext
        Follow the steps given in the plugin section - providing browsingContext, type, request, response, - finalSandboxFlags, finalResponseOrigin, + providing source, browsingContext, type, request, + response, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, - reservedEnvironment, responseCOOP, and - browsingContextSwitchNeeded. Once the steps have completed, return.
        + reservedEnvironment, responseCOOP, and COOPEnforcementResult. + Once the steps have completed, return.

        An explicitly supported XML MIME type is an XML MIME type for which @@ -82666,18 +83037,21 @@ interface Location { // but see also type type, content type contentType, a request request, a response response, a browsing context browsingContext, a sandboxing flag set - finalSandboxFlags, three origins origin, - incumbentNavigationOrigin, activeDocumentNavigationOrigin, null or an - environment reservedEnvironment, a cross-origin opener policy - navigationCOOP, and a boolean browsingContextSwitchNeeded:

        + data-x="concept-response">response response, two browsing contexts source, and browsingContext, a + sandboxing flag set finalSandboxFlags, three origins origin, incumbentNavigationOrigin, + activeDocumentNavigationOrigin, null or an + environment reservedEnvironment,a cross-origin opener policy + navigationCOOP, and a cross-origin opener + policy enforcement result COOPEnforcementResult:

          -

        1. If browsingContextSwitchNeeded is true, set browsingContext to the - result of the obtain a browsing context to use - for a navigation response algorithm, given browsingContext, - finalSandboxFlagSet, and navigationCOOP.

          2. +

        2. Set browsingContext to the result of the obtain a browsing context to use for a navigation + response algorithm, given request, response, source, + browsingContext, finalSandboxFlagSet, navigationCOOP, and + COOPEnforcementResult.

        3. Let featurePolicy be the result of creating a feature policy from a @@ -82963,20 +83337,20 @@ new PaymentRequest(…); // Allowed to use

          Page load processing model for HTML files

          When an HTML document is to be loaded, given a - browsingContext, request, response, finalSandboxFlags, - finalResponseOrigin, incumbentNavigationOrigin, + source, browsingContext, request, response, + finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, environment, responseCOOP, and - browsingContextSwitchNeeded the user agent must queue a task on the + COOPEnforcementResult the user agent must queue a task on the networking task source to:

          1. Let document be the result of creating and initializing a Document object providing "html", "text/html", - request, response, browsingContext, finalSandboxFlags, - finalResponseOrigin, incumbentNavigationOrigin, - activeDocumentNavigationOrigin, environment, responseCOOP, and - browsingContextSwitchNeeded.

            2. + request, response, source browsingContext, + finalSandboxFlags, finalResponseOrigin, + incumbentNavigationOrigin, activeDocumentNavigationOrigin, + environment, responseCOOP, and COOPEnforcementResult.

          2. Create an HTML parser and associate it with the document. Each @@ -83009,19 +83383,20 @@ new PaymentRequest(…); // Allowed to use

            Page load processing model for XML files

            -

            When faced with displaying an XML file inline, provided browsingContext, - request, response, finalSandboxFlags, +

            When faced with displaying an XML file inline, provided source, + browsingContext, request, response, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, environment,responseCOOP, and - browsingContextSwitchNeeded user agents must follow the requirements defined in - XML and Namespaces in XML, XML Media Types, DOM, - and other relevant specifications to create and - initialize a Document object providing "xml", - type, request, response, browsingContext, - finalSandboxFlags, finalResponseOrigin incumbentNavigationOrigin, + COOPEnforcementResult user agents must follow the requirements defined in + XML and Namespaces in XML, XML Media Types, + DOM, and other relevant specifications to create and initialize a Document object + providing "xml", type, request, response, + source, browsingContext, finalSandboxFlags, + finalResponseOrigin incumbentNavigationOrigin, activeDocumentNavigationOrigin, environment, responseCOOP. and - browsingContextSwitchNeeded. It must also create and a corresponding XML - parser.

            + COOPEnforcementResult. It must also create and a corresponding XML parser. +

            At the time of writing, the XML specification community had not actually yet specified how XML and the DOM interact.

            @@ -83065,21 +83440,21 @@ new PaymentRequest(…); // Allowed to use

            Page load processing model for text files

            -

            When a plain text document is to be loaded, provided a browsingContext, - request, response, finalSandboxFlags, +

            When a plain text document is to be loaded, provided source, + browsingContext, request, response, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, environment,responseCOOP, and - browsingContextSwitchNeeded the user agent must queue a task on the + COOPEnforcementResult the user agent must queue a task on the networking task source to:

            1. Let document be the result of creating and initialize a Document object providing "html", type, request, - response, browsingContext, finalSandboxFlags, + response, source, browsingContext, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, environment, responseCOOP, and - browsingContextSwitchNeeded.

              2. + COOPEnforcementResult.

            2. Create an HTML parser and associate it with the document. Act as if the tokenizer had emitted a start tag token with the tag name "pre" followed by a single @@ -83146,20 +83521,20 @@ new PaymentRequest(…); // Allowed to use

              Page load processing model for media

              -

              When an image, video, or audio resource is to be loaded, provided a browsingContext, - request, response, finalSandboxFlags, +

              When an image, video, or audio resource is to be loaded, provided source, + browsingContext, request, response, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, environment, responseCOOP, - browsingContextSwitchNeeded, the user agent should: + COOPEnforcementResult, the user agent should:

              1. Let document be the result of creating and initialize a Document object providing "html", type, request, - response, browsingContext, finalSandboxFlags, + response, source, browsingContext, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, environment, responseCOOP, and - browsingContextSwitchNeeded.

                2. + COOPEnforcementResult.

              2. Append an html element to document.

                3. @@ -83216,19 +83591,19 @@ new PaymentRequest(…); // Allowed to use

                Page load processing model for content that uses plugins

                When a resource that requires an external resource to be rendered is to be loaded, provided a - browsingContext, request, response, sandboxFlags, - finalResponseOrigin, incumbentNavigationOrigin, + source, browsingContext, request, response, + finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, environment, responseCOOP, and - browsingContextSwitchNeeded, the user agent should: + COOPEnforcementResult, the user agent should:

                1. Let document be the result of creating and initialize a Document object providing "html", type, request, - response, browsingContext, finalSandboxFlags, + response, source, browsingContext, finalSandboxFlags, finalResponseOrigin, incumbentNavigationOrigin, activeDocumentNavigationOrigin, environment, responseCOOP, and - browsingContextSwitchNeeded.

                  2. + COOPEnforcementResult.

                2. Mark document as being a plugin document

                  3. @@ -83275,11 +83650,11 @@ new PaymentRequest(…); // Allowed to use

                  When the user agent is to display a user agent page inline, the user agent should create and initialize a Document object - providing "html", "text/html", null, null, - browsingContext, an empty set, null, null, and null, and then either associate that - Document with a custom rendering that is not rendered using the normal - Document rendering rules, or mutate that Document until it represents - the content the user agent wants to render.

                  + providing "html", "text/html", null, null, null, + browsingContext, an empty set, null, null, null, a new cross-origin opener + policy, and false and then either associate that Document with a custom + rendering that is not rendered using the normal Document rendering rules, or mutate + that Document until it represents the content the user agent wants to render.

                  @@ -116229,6 +116604,30 @@ interface External { +

                  `Cross-Origin-Opener-Policy-Report-Only`

                  + +

                  This section describes a header for registration in the Permanent Message Header Field + Registry.

                  + +
                  +
                  Header field name:
                  +
                  Cross-Origin-Opener-Policy-Report-Only
                  +
                  Applicable protocol:
                  +
                  http
                  +
                  Status:
                  +
                  standard
                  +
                  Author/Change controller:
                  +
                  WHATWG
                  +
                  Specification document(s):
                  +
                  + This document is the relevant specification. +
                  +
                  Related information:
                  +
                  None.
                  +
                  + +

                  `Ping-From`

                  This section describes a header for registration in the Permanent Message Header Field @@ -116370,6 +116769,7 @@ interface External { +

                  Index