Documents are not global objects

[bzbarsky]

https://w3c.github.io/webappsec-csp/#enforced talks about "inserting it into the global object’s CSP list". But the step right above that talks about documents and worker scopes having CSP lists. Documents are not global objects...

[hiroshige-g]

Should we do the similar thing to "global object's URL"?