Anne van Kesteren
Anne van Kesteren
Wouldn't that only allow talking to itself? Or it would construct an instance in its parent or something like that?
It seems that if the attribute is not set, it's value means "inherit", not "false". Could there be a future where we want to express "false"?
Should the anonymous bit be stored on a policy container? It seems like it is meant to inherit into all the relevant places.
These new headers increase the size of an HTTP request and coupled with attacker-controlled headers or header values could be used to carry out certain cookie-size sniffing attacks. Privacy measures...
It seems this could just be a method on navigator or some such. Or perhaps a static method on EyeDropper if we wanted to namespace it. @domenic probably knows what's...
Now HTML defines a policy container concept, this should integrate with that.
Why special case data: URLs? Other URLs can be thousands of code points as well...
I'm trying to wrap my head around https://wicg.github.io/element-timing/#sec-security and failing. Is "load time" different from Fetch's timing info's end time somehow?
I'm assuming from the examples you want `` to do something.