@@ -45,6 +45,7 @@ <h1>Mixed Content</h1>
45
45
text: creating a new Document object; url: create-a-document-object
46
46
text: navigated; url: navigate
47
47
text: nested browsing context
48
+ text: parent browsing context
48
49
text: nested through; url: browsing-context-nested-through
49
50
text: plugin document
50
51
text: sandboxed origin browsing context flag
@@ -79,12 +80,6 @@ <h1>Mixed Content</h1>
79
80
url: concept-request-client
80
81
text: request client
81
82
text: client
82
- url: concept-request-context
83
- text: request context
84
- text: context
85
- url: concept-request-context-frame-type
86
- text: request context frame type
87
- text: frame type
88
83
url: concept-response-https-state
89
84
text: response https state;
90
85
text: https state
@@ -795,8 +790,6 @@ <h3 id="should-block-response">
795
790
content?
796
791
</ h3 >
797
792
798
- ISSUE(w3c/webappsec#465): This still uses "context" and "frame type". Fix.
799
-
800
793
Note: < a href ="#should-block-fetch "> If a request proceeds</ a > , we still
801
794
might want to block the response based on the state of the connection
802
795
that generated the response (e.g. because the request is < a > blockable</ a > ,
@@ -1064,14 +1057,14 @@ <h3 id="service-workers">Service Workers</h3>
1064
1057
To that end:
1065
1058
1066
1059
1. [[#should-block-fetch]] has some carve-outs for the < code > fetch</ code >
1067
- request context , with the intent of allowing a Service Worker to copy
1068
- a request as part of its response to a Fetch event (e.g.
1060
+ request < a > initiator </ a > , with the intent of allowing a Service Worker
1061
+ to copy a request as part of its response to a Fetch event (e.g.
1069
1062
< code > fetch(event.response)</ code > should be executable inside the
1070
1063
event handler.
1071
1064
1072
- The < code > fetch</ code > request context will continue to be treated as
1073
- < a > blockable </ a > when executed outside the context of a Fetch event,
1074
- which of course includes document contexts.
1065
+ < code > fetch</ code > will continue to be treated as < a > blockable </ a > when
1066
+ executed outside the context of a Fetch event, which of course includes
1067
+ document contexts.
1075
1068
1076
1069
2. [[#should-block-response]] verifies that the incoming response has the
1077
1070
same security characteristics that were allowed for the request. That
0 commit comments