@@ -77,12 +77,6 @@ urlPrefix: https://www.w3.org/TR/page-visibility-2/; spec: PAGE-VISIBILITY
77
77
urlPrefix: https://w3ctag.github.io/security-questionnaire/; spec: SECURITY-PRIVACY-QUESTIONNAIRE
78
78
type: dfn
79
79
text: same-origin policy violations; url: sop-violations
80
- urlPrefix: https://w3c.github.io/webappsec-feature-policy/; spec: FEATURE-POLICY
81
- type: dfn
82
- text: allow attribute; url: iframe-allow-attribute
83
- text: default allowlist
84
- text: policy-controlled feature
85
- text: allowed to use; url: should-request-be-allowed-to-use-feature
86
80
urlPrefix: https://www.w3.org/TR/permissions/; spec: PERMISSIONS
87
81
type: dfn
88
82
text: permission name; url: enumdef-permissionname
@@ -342,7 +336,7 @@ and defensive programming which includes:
342
336
} catch (error) {
343
337
// Handle construction errors.
344
338
if (error.name === 'SecurityError' ) {
345
- console.log('Sensor construction was blocked by the Feature Policy.' );
339
+ console.log('Sensor construction was blocked by the Permissions Policy.' );
346
340
} else if (error.name === 'ReferenceError' ) {
347
341
console.log('Sensor is not supported by the User Agent.' );
348
342
} else {
@@ -466,12 +460,12 @@ or [=extension specifications=]
466
460
are only available within a [=secure context=] .
467
461
468
462
469
- <h4 id="feature -policy" oldids="browsing-context">Feature Policy</h4>
463
+ <h4 id="permissions -policy" oldids="browsing-context,feature-policy">Permissions Policy</h4>
470
464
471
465
To avoid the privacy risk of sharing [=sensor readings=] with contexts unfamiliar
472
466
to the user, [=sensor readings=] are only available for the
473
467
[=documents=] which are [=allowed to use=] the [=policy-controlled features=] for
474
- the given [=sensor type=] . See [[FEATURE -POLICY]] for more details.
468
+ the given [=sensor type=] . See [[PERMISSIONS -POLICY]] for more details.
475
469
476
470
<h4 id="focused-area" oldids="losing-focus">Focused Area</h4>
477
471
@@ -2124,7 +2118,7 @@ for accelerometer sensor is given below.
2124
2118
};
2125
2119
</pre>
2126
2120
2127
- <h3 id="feature-policy-api">Extending the Feature Policy API</h3>
2121
+ <h3 id="permissions-policy-api" oldids=" feature-policy-api">Extending the Permissions Policy API</h3>
2128
2122
2129
2123
An implementation of the {{Sensor}} interface for each [=sensor type=] has one
2130
2124
(if [=sensor fusion=] is not performed) or several [=policy-controlled features=]
@@ -2146,18 +2140,18 @@ otherwise, the [=sensor feature names=] matches the same [=sensor type|type=]-as
2146
2140
[=sensor permission names=] .
2147
2141
2148
2142
<div class="example html">
2149
- The accelerometer feature is selectively enabled for third-party origin by adding
2150
- [= allow attribute=] to the frame container element:
2143
+ The accelerometer feature is selectively enabled for third-party origin by adding an
2144
+ <{iframe/ allow}> attribute to the frame container element:
2151
2145
<pre highlight="html">
2152
2146
<iframe src="https://third-party.com" allow="accelerometer"/></iframe>
2153
2147
</pre>
2154
2148
</div>
2155
2149
2156
2150
<div class="example html">
2157
- A sensor usage is disabled completely by specifying the feature policy in a HTTP
2151
+ A sensor usage is disabled completely by specifying the permissions policy in an HTTP
2158
2152
response header:
2159
2153
<pre highlight="js">
2160
- Feature -Policy: accelerometer 'none'
2154
+ Permissions -Policy: accelerometer=()
2161
2155
</pre>
2162
2156
</div>
2163
2157
0 commit comments