From 619e08a4477e9be75c274a9530c370d1c7849915 Mon Sep 17 00:00:00 2001 From: Mirko Brodesser Date: Mon, 25 Nov 2024 14:15:53 +0100 Subject: [PATCH] Use "navigation request's policy container's CSP list" instead of "navigation request's client's global object's CSP list" Complements https://github.com/w3c/webappsec-csp/pull/494 in order make the spec consistent. Preparation to fix https://github.com/whatwg/html/issues/4651. --- index.bs | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/index.bs b/index.bs index cc418b6a0d..8f4db2a7c2 100644 --- a/index.bs +++ b/index.bs @@ -1264,9 +1264,9 @@ spec: WebRTC; urlPrefix: https://www.w3.org/TR/webrtc/ 3. If |result| is "`Allowed`", and if |navigation request|'s current URL's scheme is `javascript`: - 1. For each |policy| of |navigation request|'s client's - global object's - CSP list: + 1. For each |policy| of |navigation request|'s + policy container's + CSP list: 1. For each |directive| of |policy|: