这是indexloc提供的服务，不要输入任何密码
Skip to content

Force embedder-initiated BCG swaps #91

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
May 22, 2023
Merged

Force embedder-initiated BCG swaps #91

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 36 additions & 0 deletions spec.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,9 @@ spec: html; urlPrefix: https://html.spec.whatwg.org/multipage/
urlPrefix: browsers.html
text: check a navigation response's adherence to its embedder policy; url: check-a-navigation-response's-adherence-to-its-embedder-policy
text: queue a cross-origin embedder policy inheritance violation; url: queue-a-cross-origin-embedder-policy-inheritance-violation
text: cross-origin opener policy enforcement result; url: coop-enforcement-result
for: cross-origin opener policy enforcement result
text: needs a browsing context group switch; url: coop-enforcement-bcg-switch
urlPrefix: dom.html
text: categories; url: concept-element-categories
text: contexts in which this element can be used; url: concept-element-contexts
Expand Down Expand Up @@ -86,11 +89,15 @@ spec: html; urlPrefix: https://html.spec.whatwg.org/multipage/
text: response; url: navigation-params-response
text: navigable; url: navigation-params-navigable
text: origin; url: navigation-params-origin
text: COOP enforcement result; url: navigation-params-coop-enforcement-result
for: history handling behavior
text: replace; url: hh-replace
for: document state
text: document; url: document-state-document
text: checking if unloading is user-canceled
text: source snapshot params
for: source snapshot params
text: fetch client; url: source-snapshot-params-client
urlPrefix: interaction.html
text: activation notification; url: activation-notification
text: consume user activation; url: consume-user-activation
Expand All @@ -116,6 +123,7 @@ spec: html; urlPrefix: https://html.spec.whatwg.org/multipage/
urlPrefix: webappapis.html
for: environment
text: target browsing context; url: concept-environment-target-browsing-context
text: navigation and traversal task source
urlPrefix: document-sequences.html
for: browsing context
text: active document; url: active-document
Expand Down Expand Up @@ -1818,6 +1826,34 @@ CORP violation report=] algorithm, as leaving it unfenced may cause a privacy le
</wpt>
</div>

<h4 id=bcg-swap>Browsing context group swap</h4>

When the embedder of a <{fencedframe}> initiates navigations inside the frame, we must perform a
[=browsing context group=] swap to entirely reset the context inside the frame, to ensure nothing is
left over to be leaked to the next {{Document}}.

<div algorithm=attempt-populate-history-bcg-swap>
Modify [[HTML]]'s [=attempt to populate the history entry's document=] algorithm. Add a step
before the step that "[=queues a task=] on the [=navigation and traversal task source=]", that
reads:

6. If all of the following conditions are true:

* |navigable| is a [=fenced navigable container/fenced navigable=];

* <var ignore>sourceSnapshotParams</var>'s [=source snapshot params/fetch client=] is **not**
|navigable|'s [=navigable/active document=]'s [=relevant settings object=];

* |navigationParams| is non-null

then set |navigationParams|'s [=navigation params/COOP enforcement result=]'s [=cross-origin
opener policy enforcement result/needs a browsing context group switch=] [=boolean=] to true.

Issue: This indeed works, but we should consider using a separate mechanism to carry this out,
instead of piggybacking off of the COOP mechanism which was designed without fenced frames in
mind, and could evolve in ways that give this specification unwanted side-effects.
</div>

<h3 id=page-visibility>Page visibility</h3>

The <a href=https://html.spec.whatwg.org/#page-visibility>Page visibility</a> section of [[HTML]] is
Expand Down