diff --git a/spec.bs b/spec.bs
index 6bcdd3c..e548854 100644
--- a/spec.bs
+++ b/spec.bs
@@ -725,9 +725,9 @@ boundary, which can allow for colluding parties to join cross-site data and buil
user. To prevent that, the ad auction API [=construct a pending fenced frame config|constructs=] a
[=fenced frame config=] whose underlying [=fenced frame config/mapped url|URL=] is opaque to the
embedding context. The [=fenced frame config=] is also constructed with restrictions on what the
-[=fenced frame config/content size=] of the frame must be and what the [=fenced frame config/
-effective enabled permissions|permissions policy=] of the frame must be, as those can be used as
-fingerprinting vectors.
+[=fenced frame config/container size=] and [=fenced frame config/content size=] of the frame must
+be and what the [=fenced frame config/effective enabled permissions|permissions policy=] of the
+frame must be, as those can be used as fingerprinting vectors.
Displaying a personalized payment button:
@@ -1127,6 +1127,9 @@ A fenced frame config is a [=struct=] with the following [=str
: visibility
:: a [=fencedframeconfig/visibility=]
+ : container size
+ :: null, or a [=fencedframetype/size=]
+
: content size
:: null, or a [=struct=] with the following [=struct/items=]:
: value
@@ -1223,6 +1226,9 @@ A fenced frame config instance is a [=struct=] with the follow
: mapped url
:: a [=URL=]
+ : container size
+ :: null, or a [=fencedframetype/size=]
+
: content size
:: null, or a [=fencedframetype/size=]
@@ -1268,6 +1274,9 @@ A fenced frame config instance is a [=struct=] with the follow
: [=fenced frame config instance/mapped url=]
:: |config|'s [=fenced frame config/mapped url=]'s [=mapped url/value=]
+ : [=fenced frame config instance/container size=]
+ :: |config|'s [=fenced frame config/container size=]
+
: [=fenced frame config instance/content size=]
:: |config|'s [=fenced frame config/content size=] if null, otherwise |config|'s [=fenced frame
config/content size=]'s [=content size/value=]