feedback

Author: annevk

source

@@ -8111,19 +8111,24 @@ interface <dfn>DOMStringList</dfn> {
   data-x="Serializable SameAgentCluster">SameAgentCluster</code>. It must only appear on an
   interface. It must not appear more than once on an interface.</p>
 
-  <p>For a given <span>platform object</span>, only the object's <span>primary interface</span> is
-  considered during the (de)serialization process. Thus, if inheritance is involved in defining the
-  interface, each <code data-x="Serializable">[Serializable]</code>-annotated interface in the
-  inheritance chain needs to define standalone <span>serialization steps</span> and
-  <span>deserialization steps</span>, including taking into account any important data that might
-  come from inherited interfaces.</p>
+  <p class="note">The <code data-x="Serializable SameOrigin">SameOrigin</code> identifier prevents
+  deserialization in cross-origin realms. Similarly, the <code data-x="Serializable
+  SameAgentCluster">SameAgentCluster</code> identifier prevents deserialization in realms belonging
+  to other agent clusters.</p>
 
   <p class="XXX">As discussed in <a href="https://github.com/whatwg/html/issues/4920">issue
   #4920</a>, new features are strongly encouraged to use either <code data-x="Serializable
   SameOrigin">SameOrigin</code> or <code data-x="Serializable SameOrigin">SameOrigin</code> and
   <code data-x="Serializable SameAgentCluster">SameAgentCluster</code> together. A future
   refactoring will likely tightly couple the latter.</p>
 
+  <p>For a given <span>platform object</span>, only the object's <span>primary interface</span> is
+  considered during the (de)serialization process. Thus, if inheritance is involved in defining the
+  interface, each <code data-x="Serializable">[Serializable]</code>-annotated interface in the
+  inheritance chain needs to define standalone <span>serialization steps</span> and
+  <span>deserialization steps</span>, including taking into account any important data that might
+  come from inherited interfaces.</p>
+
   <div class="example">
    <p>Let's say we were defining a platform object <code data-x="">Person</code>, which had
    associated with it two pieces of associated data:</p>
@@ -8479,12 +8484,12 @@ interface <dfn>DOMStringList</dfn> {
 
      <li><p>Set <var>serialized</var> to { [[Type]]: <var>typeString</var> }.</p></li>
 
-     <li><p>If <var>value</var>'s interface <code data-x="Serializable">[Serializable]</code>
+     <li><p>If <var>value</var>'s interface's <code data-x="Serializable">[Serializable]</code>
      extended attribute contains the <code data-x="Serializable SameOrigin">SameOrigin</code>
      identifier, then set <var>serialized</var>.[[EnforceOrigin]] to the <span>current settings
      object</span>'s <span data-x="concept-settings-object-origin">origin</span>.</p></li>
 
-     <li><p>If <var>value</var>'s interface <code data-x="Serializable">[Serializable]</code>
+     <li><p>If <var>value</var>'s interface's <code data-x="Serializable">[Serializable]</code>
      extended attribute contains the <code data-x="Serializable
      SameAgentCluster">SameAgentCluster</code> identifier, then set
      <var>serialized</var>.[[EnforceAgentCluster]] to the <span>surrounding agent</span>'s