@@ -695,22 +695,23 @@ iframe:fullscreen {
695
695
696
696
697
697
698
- <h2 id=feature-policy-integration>Feature Policy Integration</h2>
698
+ <h2 id=permissions-policy-integration oldids=feature-policy-integration>Permissions Policy
699
+ Integration</h2>
699
700
700
701
<p> This specification defines a <a>policy-controlled feature</a> identified by the string
701
702
"<code> <dfn data-lt="fullscreen-feature">fullscreen</dfn> </code> ". Its <a>default allowlist</a> is
702
703
<code> 'self' </code> .
703
704
704
705
<div class="note">
705
- <p> A <a>document</a> 's <a>feature policy</a> determines whether any content in that document is allowed to
706
- go fullscreen. If disabled in any document, no content in the document will be <a>allowed to use</a>
707
- fullscreen.
706
+ <p> A <a>document</a> 's <a for=Document>permissions policy</a> determines whether any content in that
707
+ document is allowed to go fullscreen. If disabled in any document, no content in the document will
708
+ be <a>allowed to use</a> fullscreen.
708
709
709
710
<p> The <{iframe/allowfullscreen}> attribute of the HTML <{iframe}> element affects the <a>container
710
711
policy</a> for any document nested in that iframe. Unless overridden by the <{iframe/allow}>
711
712
attribute, setting <{iframe/allowfullscreen}> on an iframe is equivalent to <code> <iframe
712
713
allow="fullscreen *"></code> , as described in
713
- [[FEATURE-POLICY #iframe-allowfullscreen-attribute]] .
714
+ [[feature-policy-1 #iframe-allowfullscreen-attribute]] .
714
715
</div>
715
716
716
717
@@ -723,9 +724,9 @@ user agent or even operating system environment when fullscreen. See also the de
723
724
{{Element/requestFullscreen()}} .
724
725
725
726
<p> To enable content in a <a>nested browsing context</a> to go fullscreen, it needs to be
726
- specifically allowed via feature policy, either through the <{iframe/allowfullscreen}> attribute of
727
- the HTML <{iframe}> element, or an appropriate declaration in the <{iframe/allow}> attribute of the
728
- HTML <{iframe}> element, or through a `<a http-header><code>Permissions-Policy</code></a> ` HTTP
727
+ specifically allowed via permissions policy, either through the <{iframe/allowfullscreen}> attribute
728
+ of the HTML <{iframe}> element, or an appropriate declaration in the <{iframe/allow}> attribute of
729
+ the HTML <{iframe}> element, or through a `<a http-header><code>Permissions-Policy</code></a> ` HTTP
729
730
header delivered with the <a>document</a> through which it is nested.
730
731
731
732
<p> This prevents e.g. content from third parties to go fullscreen without explicit permission.
0 commit comments