This spec patch does the following:

• Modifies the "generate and queue a report" to early return if invoked from documents within a fenced frame tree with its network access revoked.
• Modifies the Webpackage signed exchange reporting API to only queue a report if the request's associated partition nonce is not one of the revoked nonces.
  • Note that this spec is on hold and most likely not going to become a standard, but we are still adding this patch in to cover all our bases.
• Modifies the "must be blocked due to a revoked partition nonce" algorithm to look for the nonce and URL in the request object, rather than expecting one to be provided.
  • This should be fine because the algorithm that pulls the nonce from the request object ultimately gets that from the request's associated environment. That nonce is set when the environment is first created, and we have a patch to conditionally set it to the fenced frame's network revocation nonce.
• Makes the "nonce" addition to the network partition key definition in the credentialless iframes spec more well defined.

#149 should be merged in before this PR so that the logic that sets the environment's partition nonce to the fenced frame nonce is in place.

Preview | Diff