-
Notifications
You must be signed in to change notification settings - Fork 131
Add features for permissions policy and feature policy #2661
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
cc: @Elchi3 you might have opinions about this one, since I expect it to impact BCD as well. |
spec: https://w3c.github.io/webappsec-permissions-policy/ | ||
caniuse: permissions-policy | ||
compat_features: | ||
- http.headers.Permissions-Policy |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I guess none of https://w3c.github.io/webappsec-permissions-policy/#idl-index has shipped...
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah. I asked about this at the time and it seems like at some point somebody thought about it but nothing else came of it.
I've sent mdn/browser-compat-data#26708 to start unwinding the compat data, to unblock this PR. |
This PR adds a feature for permissions policy and a discouraged feature for feature policy. This is a big mess, so these are draft features.
Unfortunately, BCD doesn't accurately record the data for these features and it it's a bit of work to unwind this. I propose that we add these as drafts for now and, at the time we merge this, file an issue on BCD that requests
Feature-Policy
andPermissions-Policy
be separated into separate keys and see where things go from there.The full backstory:
Feature-Policy
header was once added to browsers.Feature-Policy
was "renamed" toPermissions-Policy
. "Renamed" because yes it was renamed, but it also got a breaking syntax change at the same time (see also Control browser features with Permissions Policy | Privacy & Security | Chrome for Developers).Feature-Policy
was an alternative name forPermissions-Policy
, ignoring the syntax change. I'm not quite sure why this happened, given the failure of such an approach earlier.Given this story, we cannot accurately calculate either feature's implementation status in a way that accords with caniuse or, in my opinion, confusing developers (because let me tell you, I was confused about this and I knew most of the backstory already).