[e] (0) Add a sandboxing flag for use by fetch

Fixing https://www.w3.org/Bugs/Public/show_bug.cgi?id=25734 Affected topics: HTML git-svn-id: http://svn.whatwg.org/webapps@8706 340c8d12-0b0e-0410-8428-c7bf67bfef74
whatwg · Aug 4, 2014 · 120b555 · 120b555
1 parent 2d8bdcc
commit 120b555
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 2 deletions.
diff --git a/complete.html b/complete.html
@@ -10970,6 +10970,7 @@ <h4 id=the-hgroup-element>4.3.7 The <dfn><code>hgroup</code></dfn> element</h4>
   </div>
 
 
+
   <h4 id=the-header-element>4.3.8 The <dfn><code>header</code></dfn> element</h4>
 
   <dl class=element><dt><a href=#concept-element-categories id=the-header-element:concept-element-categories>Categories</a>:<dd><a href=#flow-content-2 id=the-header-element:flow-content-2>Flow content</a>.<dd><a href=#palpable-content-2 id=the-header-element:palpable-content-2>Palpable content</a>.<dt><a href=#concept-element-contexts id=the-header-element:concept-element-contexts>Contexts in which this element can be used</a>:<dd>Where <a href=#flow-content-2 id=the-header-element:flow-content-2-2>flow content</a> is expected.<dt><a href=#concept-element-content-model id=the-header-element:concept-element-content-model>Content model</a>:<dd><a href=#flow-content-2 id=the-header-element:flow-content-2-3>Flow content</a>, but with no <code id=the-header-element:the-header-element><a href=#the-header-element>header</a></code>, <code id=the-header-element:the-footer-element><a href=#the-footer-element>footer</a></code>, or <code id=the-header-element:the-main-element><a href=#the-main-element>main</a></code> element descendants.<dt><a href=#concept-element-tag-omission id=the-header-element:concept-element-tag-omission>Tag omission in text/html</a>:<dd>Neither tag is omissible.<dt><a href=#concept-element-attributes id=the-header-element:concept-element-attributes>Content attributes</a>:<dd><a href=#global-attributes id=the-header-element:global-attributes>Global attributes</a><dt><a href=#concept-element-dom id=the-header-element:concept-element-dom>DOM interface</a>:<dd>Uses <code id=the-header-element:htmlelement><a href=#htmlelement>HTMLElement</a></code>.</dl>
@@ -57765,6 +57766,11 @@ <h3 id=sandboxing>7.4 Sandboxing</h3>
 
     <p>This flag blocks features that trigger automatically, such as <a href=#attr-media-autoplay id=sandboxing:attr-media-autoplay>automatically playing a video</a> or <a href=#attr-fe-autofocus id=sandboxing:attr-fe-autofocus>automatically focusing a form control</a>.</p>
 
+   <dt>The <dfn id=sandboxed-storage-area-urls-flag>sandboxed storage area URLs flag</dfn><dd>
+
+    <p>This flag prevents URL schemes that use storage areas from being able to access the origin's
+    data.</p>
+
    <dt>The <dfn id=sandboxed-fullscreen-browsing-context-flag>sandboxed fullscreen browsing context flag</dfn><dd>
 
     <p>This flag prevents content from using the <code id=sandboxing:dom-element-requestfullscreen><a href=#dom-element-requestfullscreen>requestFullscreen()</a></code> method.</p>
@@ -57814,7 +57820,7 @@ <h3 id=sandboxing>7.4 Sandboxing</h3>
       authors to use script to do them when sandboxed rather than allowing them to use the
       declarative features.</p>
 
-     <li><p>The <a href=#sandboxed-fullscreen-browsing-context-flag id=sandboxing:sandboxed-fullscreen-browsing-context-flag>sandboxed fullscreen browsing context flag</a>, unless the <var>allow fullscreen flag</var> was passed to the <a href=#parse-a-sandboxing-directive id=sandboxing:parse-a-sandboxing-directive>parse a sandboxing
+     <li><p>The <a href=#sandboxed-storage-area-urls-flag id=sandboxing:sandboxed-storage-area-urls-flag>sandboxed storage area URLs flag</a>.<li><p>The <a href=#sandboxed-fullscreen-browsing-context-flag id=sandboxing:sandboxed-fullscreen-browsing-context-flag>sandboxed fullscreen browsing context flag</a>, unless the <var>allow fullscreen flag</var> was passed to the <a href=#parse-a-sandboxing-directive id=sandboxing:parse-a-sandboxing-directive>parse a sandboxing
      directive</a> flag.<li><p>The <a href=#sandboxed-document.domain-browsing-context-flag id=sandboxing:sandboxed-document.domain-browsing-context-flag>sandboxed <code>document.domain</code> browsing
      context flag</a>.</ul>
 

diff --git a/index b/index
@@ -10970,6 +10970,7 @@ Space is not the only void</pre>
   </div>
 
 
+
   <h4 id=the-header-element>4.3.8 The <dfn><code>header</code></dfn> element</h4>
 
   <dl class=element><dt><a href=#concept-element-categories id=the-header-element:concept-element-categories>Categories</a>:<dd><a href=#flow-content-2 id=the-header-element:flow-content-2>Flow content</a>.<dd><a href=#palpable-content-2 id=the-header-element:palpable-content-2>Palpable content</a>.<dt><a href=#concept-element-contexts id=the-header-element:concept-element-contexts>Contexts in which this element can be used</a>:<dd>Where <a href=#flow-content-2 id=the-header-element:flow-content-2-2>flow content</a> is expected.<dt><a href=#concept-element-content-model id=the-header-element:concept-element-content-model>Content model</a>:<dd><a href=#flow-content-2 id=the-header-element:flow-content-2-3>Flow content</a>, but with no <code id=the-header-element:the-header-element><a href=#the-header-element>header</a></code>, <code id=the-header-element:the-footer-element><a href=#the-footer-element>footer</a></code>, or <code id=the-header-element:the-main-element><a href=#the-main-element>main</a></code> element descendants.<dt><a href=#concept-element-tag-omission id=the-header-element:concept-element-tag-omission>Tag omission in text/html</a>:<dd>Neither tag is omissible.<dt><a href=#concept-element-attributes id=the-header-element:concept-element-attributes>Content attributes</a>:<dd><a href=#global-attributes id=the-header-element:global-attributes>Global attributes</a><dt><a href=#concept-element-dom id=the-header-element:concept-element-dom>DOM interface</a>:<dd>Uses <code id=the-header-element:htmlelement><a href=#htmlelement>HTMLElement</a></code>.</dl>
@@ -57765,6 +57766,11 @@ x === this; // true</pre>
 
     <p>This flag blocks features that trigger automatically, such as <a href=#attr-media-autoplay id=sandboxing:attr-media-autoplay>automatically playing a video</a> or <a href=#attr-fe-autofocus id=sandboxing:attr-fe-autofocus>automatically focusing a form control</a>.</p>
 
+   <dt>The <dfn id=sandboxed-storage-area-urls-flag>sandboxed storage area URLs flag</dfn><dd>
+
+    <p>This flag prevents URL schemes that use storage areas from being able to access the origin's
+    data.</p>
+
    <dt>The <dfn id=sandboxed-fullscreen-browsing-context-flag>sandboxed fullscreen browsing context flag</dfn><dd>
 
     <p>This flag prevents content from using the <code id=sandboxing:dom-element-requestfullscreen><a href=#dom-element-requestfullscreen>requestFullscreen()</a></code> method.</p>
@@ -57814,7 +57820,7 @@ x === this; // true</pre>
       authors to use script to do them when sandboxed rather than allowing them to use the
       declarative features.</p>
 
-     <li><p>The <a href=#sandboxed-fullscreen-browsing-context-flag id=sandboxing:sandboxed-fullscreen-browsing-context-flag>sandboxed fullscreen browsing context flag</a>, unless the <var>allow fullscreen flag</var> was passed to the <a href=#parse-a-sandboxing-directive id=sandboxing:parse-a-sandboxing-directive>parse a sandboxing
+     <li><p>The <a href=#sandboxed-storage-area-urls-flag id=sandboxing:sandboxed-storage-area-urls-flag>sandboxed storage area URLs flag</a>.<li><p>The <a href=#sandboxed-fullscreen-browsing-context-flag id=sandboxing:sandboxed-fullscreen-browsing-context-flag>sandboxed fullscreen browsing context flag</a>, unless the <var>allow fullscreen flag</var> was passed to the <a href=#parse-a-sandboxing-directive id=sandboxing:parse-a-sandboxing-directive>parse a sandboxing
      directive</a> flag.<li><p>The <a href=#sandboxed-document.domain-browsing-context-flag id=sandboxing:sandboxed-document.domain-browsing-context-flag>sandboxed <code>document.domain</code> browsing
      context flag</a>.</ul>
 

diff --git a/source b/source
@@ -15818,6 +15818,7 @@ Space is not the only void</pre>
   </div>
 
 
+
   <h4>The <dfn><code>header</code></dfn> element</h4>
 
   <dl class="element">
@@ -78207,6 +78208,16 @@ x === this; // true</pre>
    </dd>
 
 
+   <dt>The <dfn>sandboxed storage area URLs flag</dfn></dt>
+
+   <dd>
+
+    <p>This flag prevents URL schemes that use storage areas from being able to access the origin's
+    data.</p>
+
+   </dd>
+
+
    <dt>The <dfn>sandboxed fullscreen browsing context flag</dfn></dt>
 
    <dd>
@@ -78297,6 +78308,8 @@ x === this; // true</pre>
 
      </li>
 
+     <li><p>The <span>sandboxed storage area URLs flag</span>.</p></li>
+
      <li><p>The <span>sandboxed fullscreen browsing context flag</span>, unless the <var>allow fullscreen flag</var> was passed to the <span>parse a sandboxing
      directive</span> flag.</p></li>