Skip to content

Commit 58cd1a3

Browse files
authored
Merge pull request #407 from clelland/permissions-policy
Rename Feature Policy to Permissions Policy
2 parents 6eb608d + 185db8a commit 58cd1a3

File tree

1 file changed

+8
-14
lines changed

1 file changed

+8
-14
lines changed

index.bs

Lines changed: 8 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -77,12 +77,6 @@ urlPrefix: https://www.w3.org/TR/page-visibility-2/; spec: PAGE-VISIBILITY
7777
urlPrefix: https://w3ctag.github.io/security-questionnaire/; spec: SECURITY-PRIVACY-QUESTIONNAIRE
7878
type: dfn
7979
text: same-origin policy violations; url: sop-violations
80-
urlPrefix: https://w3c.github.io/webappsec-feature-policy/; spec: FEATURE-POLICY
81-
type: dfn
82-
text: allow attribute; url: iframe-allow-attribute
83-
text: default allowlist
84-
text: policy-controlled feature
85-
text: allowed to use; url: should-request-be-allowed-to-use-feature
8680
urlPrefix: https://www.w3.org/TR/permissions/; spec: PERMISSIONS
8781
type: dfn
8882
text: permission name; url: enumdef-permissionname
@@ -342,7 +336,7 @@ and defensive programming which includes:
342336
} catch (error) {
343337
// Handle construction errors.
344338
if (error.name === 'SecurityError') {
345-
console.log('Sensor construction was blocked by the Feature Policy.');
339+
console.log('Sensor construction was blocked by the Permissions Policy.');
346340
} else if (error.name === 'ReferenceError') {
347341
console.log('Sensor is not supported by the User Agent.');
348342
} else {
@@ -466,12 +460,12 @@ or [=extension specifications=]
466460
are only available within a [=secure context=].
467461

468462

469-
<h4 id="feature-policy" oldids="browsing-context">Feature Policy</h4>
463+
<h4 id="permissions-policy" oldids="browsing-context,feature-policy">Permissions Policy</h4>
470464

471465
To avoid the privacy risk of sharing [=sensor readings=] with contexts unfamiliar
472466
to the user, [=sensor readings=] are only available for the
473467
[=documents=] which are [=allowed to use=] the [=policy-controlled features=] for
474-
the given [=sensor type=]. See [[FEATURE-POLICY]] for more details.
468+
the given [=sensor type=]. See [[PERMISSIONS-POLICY]] for more details.
475469

476470
<h4 id="focused-area" oldids="losing-focus">Focused Area</h4>
477471

@@ -2124,7 +2118,7 @@ for accelerometer sensor is given below.
21242118
};
21252119
</pre>
21262120

2127-
<h3 id="feature-policy-api">Extending the Feature Policy API</h3>
2121+
<h3 id="permissions-policy-api" oldids="feature-policy-api">Extending the Permissions Policy API</h3>
21282122

21292123
An implementation of the {{Sensor}} interface for each [=sensor type=] has one
21302124
(if [=sensor fusion=] is not performed) or several [=policy-controlled features=]
@@ -2146,18 +2140,18 @@ otherwise, the [=sensor feature names=] matches the same [=sensor type|type=]-as
21462140
[=sensor permission names=].
21472141

21482142
<div class="example html">
2149-
The accelerometer feature is selectively enabled for third-party origin by adding
2150-
[=allow attribute=] to the frame container element:
2143+
The accelerometer feature is selectively enabled for third-party origin by adding an
2144+
<{iframe/allow}> attribute to the frame container element:
21512145
<pre highlight="html">
21522146
&lt;iframe src="https://third-party.com" allow="accelerometer"/&gt;&lt;/iframe&gt;
21532147
</pre>
21542148
</div>
21552149

21562150
<div class="example html">
2157-
A sensor usage is disabled completely by specifying the feature policy in a HTTP
2151+
A sensor usage is disabled completely by specifying the permissions policy in an HTTP
21582152
response header:
21592153
<pre highlight="js">
2160-
Feature-Policy: accelerometer 'none'
2154+
Permissions-Policy: accelerometer=()
21612155
</pre>
21622156
</div>
21632157

0 commit comments

Comments
 (0)