Skip to content

[TAG] Confusion over extending policy into child frames #71

Open
@triblondon

Description

@triblondon

From TAG review

Under the default allowlists header, the phrase "The feature is allowed at the top level by default, and when allowed, is allowed by default to documents in child frames." is rather confusing, and suggests to us that perhaps the allow attribute is required in order to extend a feature-policy defined in the header, into child frames (which doesn't make a lot of sense because in that case there'd be no reason to have multiple origins listed in the header policy). Perhaps this is a hangover from a previous version of the spec in which there was a disable attribute as well as the enable (now allow) one?

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions