|
7 | 7 | <link href="https://www.w3.org/StyleSheets/TR/2021/W3C-WD" rel="stylesheet">
|
8 | 8 | <meta content="Bikeshed version c67c745b1, updated Fri Jan 17 14:27:28 2025 -0800" name="generator">
|
9 | 9 | <link href="https://www.w3.org/TR/CSP3/" rel="canonical">
|
10 |
| - <meta content="bd58fec7bf615d3067727c04f6c4f7ad810e31d2" name="revision"> |
| 10 | + <meta content="b6358ec9683f46f609cef678a33799baf85e001e" name="revision"> |
11 | 11 | <meta content="dark light" name="color-scheme">
|
12 | 12 | <link href="https://www.w3.org/StyleSheets/TR/2021/dark.css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css">
|
13 | 13 | <style>
|
@@ -3827,7 +3827,7 @@ <h5 class="heading settled" data-level="6.4.2.2" id="frame-ancestors-and-frame-o
|
3827 | 3827 | <p>This directive is similar to the `<code>`<code><a data-link-type="http-header" href="https://html.spec.whatwg.org/multipage/document-lifecycle.html#x-frame-options" id="ref-for-x-frame-options①">X-Frame-Options</a></code>`</code>` HTTP
|
3828 | 3828 | response header. The <code>'none'</code> source expression is roughly equivalent to that
|
3829 | 3829 | header’s `<code>DENY</code>`, and <code>'self'</code> to that header’s `<code>SAMEORIGIN</code>`. <a data-link-type="biblio" href="#biblio-html" title="HTML Standard">[HTML]</a></p>
|
3830 |
| - <p>In order to allow backwards-compatible deployment, the <a data-link-type="dfn" href="#frame-ancestors" id="ref-for-frame-ancestors③"><code>frame-ancestors</code></a> directive <em>obsoletes</em> the |
| 3830 | + <p>In order to allow backwards-compatible deployment, the <a data-link-type="dfn" href="#frame-ancestors" id="ref-for-frame-ancestors③"><code>frame-ancestors</code></a> directive <em>overrides</em> the |
3831 | 3831 | `<code>`<code><a data-link-type="http-header" href="https://html.spec.whatwg.org/multipage/document-lifecycle.html#x-frame-options" id="ref-for-x-frame-options②">X-Frame-Options</a></code>`</code>` header. If a resource is delivered with
|
3832 | 3832 | a <a data-link-type="dfn" href="#content-security-policy-object" id="ref-for-content-security-policy-object⑥⑧">policy</a> that includes a <a data-link-type="dfn" href="#directives" id="ref-for-directives③⓪">directive</a> named <a data-link-type="dfn" href="#frame-ancestors" id="ref-for-frame-ancestors④"><code>frame-ancestors</code></a> and whose <a data-link-type="dfn" href="#policy-disposition" id="ref-for-policy-disposition①⑨">disposition</a> is
|
3833 | 3833 | "<code>enforce</code>", then the `<code>`<code><a data-link-type="http-header" href="https://html.spec.whatwg.org/multipage/document-lifecycle.html#x-frame-options" id="ref-for-x-frame-options③">X-Frame-Options</a></code>`</code>` header will be
|
|
0 commit comments