Skip to content
This repository was archived by the owner on Jul 30, 2019. It is now read-only.

Chaals remove allow-presentation 893 #1040

Closed
wants to merge 3 commits into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion sections/attributes.include
Original file line number Diff line number Diff line change
Expand Up @@ -657,7 +657,6 @@
"<code>allow-forms</code>",
"<code>allow-pointer-lock</code>",
"<code>allow-popups</code>",
"<code>allow-presentation</code>",
"<code>allow-same-origin</code>",
"<code>allow-scripts</code> and
"<code>allow-top-navigation</code>"
Expand Down
22 changes: 4 additions & 18 deletions sections/browsers.include
Original file line number Diff line number Diff line change
@@ -1,12 +1,9 @@
<section>
<!--
████████ ████████ ███████ ██ ██ ██████ ████████ ████████ ██████
██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██
██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██
████████ ████████ ██ ██ ██ ██ ██ ██████ ██████ ████████ ██████
██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██
██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██
████████ ██ ██ ███████ ███ ███ ██████ ████████ ██ ██ ██████

BROWSERS


-->

<h2 id="browsers">Loading Web pages</h2>
Expand Down Expand Up @@ -2205,14 +2202,6 @@

</dd>

<dt>The <dfn>sandboxed presentation browsing context flag</dfn></dt>

<dd>

This flag disables the Presentation API. [[!PRESENTATION-API]]

</dd>

</dl>

When the user agent is to <dfn lt="parse the sandboxing directive|parse a sandboxing directive">parse a sandboxing directive</dfn>, given a string <var>input</var>, a <a>sandboxing flag set</a> <var>output</var>, and
Expand Down Expand Up @@ -2295,9 +2284,6 @@

<li>The <a>sandboxed modals flag</a>, unless <var>tokens</var> contains the <dfn><code>allow-modals</code></dfn> keyword.</li>

<li>The <a>sandboxed presentation browsing context flag</a>, unless <var>tokens</var>
contains the <dfn><code>allow-presentation</code></dfn> keyword.</li>

</ul>

</li>
Expand Down
8 changes: 5 additions & 3 deletions sections/semantics-embedded-content.include
Original file line number Diff line number Diff line change
Expand Up @@ -3886,7 +3886,8 @@ My &lt;img src="heart.png" alt="heart"&gt; breaks.
The <dfn element-attr for="iframe"><code>sandbox</code></dfn> attribute, when specified,
enables a set of extra restrictions on any content hosted by the <{iframe}>. Its value
must be an <a>unordered set of unique space-separated tokens</a> that are <a>ASCII
case-insensitive</a>. The allowed values are <code>allow-forms</code>, <code>allow-pointer-lock</code>, <code>allow-popups</code>, <code>allow-presentation</code>, <code>allow-same-origin</code>, <code>allow-scripts</code>, and <code>allow-top-navigation</code>.
case-insensitive</a>. The allowed values are <code>allow-forms</code>, <code>allow-pointer-lock</code>,
<code>allow-popups</code>, <code>allow-same-origin</code>, <code>allow-scripts</code>, and <code>allow-top-navigation</code>.

When the attribute is set, the content is treated as being from a unique
[=concept/origin=],
Expand All @@ -3896,8 +3897,9 @@ My &lt;img src="heart.png" alt="heart"&gt; breaks.
the content to be treated as being from its real origin instead of forcing it into a unique
origin; the <code>allow-top-navigation</code>
keyword allows the content to <a>navigate</a> its <a>top-level browsing context</a>;
and the <code>allow-forms</code>, <code>allow-pointer-lock</code>, <code>allow-popups</code>, <code>allow-presentation</code> and <code>allow-scripts</code> keywords re-enable forms, the
pointer lock API, popups, the presentation API, and scripts respectively. [[!POINTERLOCK]] [[!PRESENTATION-API]]
and the <code>allow-forms</code>, <code>allow-pointer-lock</code>, <code>allow-popups</code>,
and <code>allow-scripts</code> keywords re-enable forms, the
pointer lock API, popups, and scripts respectively. [[!POINTERLOCK]]

<p class="warning">Setting both the <code>allow-scripts</code> and <code>allow-same-origin</code> keywords together when the
embedded page has the <a>same origin</a> as the page containing the <code>iframe</code>
Expand Down