Skip to content

Make Permissions-Policy HTTP header OPTIONAL #275

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Mar 1, 2023
Merged

Make Permissions-Policy HTTP header OPTIONAL #275

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
77c3272
Make Permissions-Policy HTTP header OPTIONAL
marcoscaceres Feb 23, 2023
c00f215
Update index.html
marcoscaceres Feb 28, 2023
89cf57d
Update index.html
tantek Feb 28, 2023
0d9db9d
Merge branch 'main' into optional_pp_header
marcoscaceres Mar 1, 2023
4c45203
Merge branch 'main' into optional_pp_header
marcoscaceres Mar 1, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 10 additions & 1 deletion index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -716,6 +716,10 @@ <h2>
allowlist/'self'=], which means third-party contexts are not [=allowed
to use=] the API by default.
</p>
<p>
It is OPTIONAL for user agents to support
[[[PERMISSIONS-POLICY]]]'s `Permissions-Policy` HTTP header.
</p>
<p>
Developers can use the means afforded by the [[[permissions-policy]]]
specification to control if and when a third-party context is [=allowed
Expand All @@ -725,7 +729,7 @@ <h2>
<p>
Although user agents are unified in preventing the Web Share API from
being used in third-party context, at the time of publication there
are interoperability with relying on the [[[Permissions-Policy]]] to
are interoperability issues with relying on the [[[Permissions-Policy]]] to
enable the API in third-party contexts. In particular, although
the[^iframe/allow^] attribute is widely supported, the updated syntax
for the [^iframe/allow^] attribute is not. Similarly, the
Expand All @@ -734,6 +738,11 @@ <h2>
[[[Permissions-Policy]]] specification before relying on it to enable
the Web Share API in third-party contexts.
</p>
<p>
When the `Permissions-Policy` HTTP header is more widely supported,
the Working Group expects to revise this specification
to require support for the header.
</p>
</aside>
</section>
<section class="informative" id="a11y">
Expand Down