Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Wildcards in Permissions Policy Origins #482

Closed
wants to merge 18 commits into from
Closed

Wildcards in Permissions Policy Origins #482

Changes from 1 commit
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
003d9f4
Wildcards in Permissions Policy Origins
arichiv Aug 17, 2022
95dd38a
Update index.bs
arichiv Aug 29, 2022
3d32a4b
Update index.bs
arichiv Aug 29, 2022
a0c3f34
Update index.bs
arichiv Aug 29, 2022
2e1edfa
Update index.bs
arichiv Aug 30, 2022
4f863dc
Update index.bs
arichiv Aug 30, 2022
8d8904e
Update index.bs
arichiv Aug 30, 2022
5b37685
Update index.bs
arichiv Aug 31, 2022
8421b5a
Update index.bs
arichiv Aug 31, 2022
5b4453a
Update index.bs
arichiv Sep 15, 2022
947f92c
Update index.bs
arichiv Sep 15, 2022
fe2d861
Update index.bs
arichiv Sep 15, 2022
c20a0d7
Update index.bs
arichiv Oct 4, 2022
3974fac
Update index.bs
arichiv Oct 5, 2022
af420af
Update index.bs
arichiv Oct 5, 2022
f40a6e8
Update index.bs
arichiv Oct 5, 2022
2a48716
Merge branch 'w3c:main' into patch-1
arichiv Oct 5, 2022
7f4572c
Update index.bs
arichiv Oct 5, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
5 changes: 4 additions & 1 deletion index.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -338,13 +338,16 @@ spec: HEADER-STRUCTURE; urlPrefix: https://httpwg.org/http-extensions/draft-ietf
<dfn>serialized-policy-directive</dfn> = <a>feature-identifier</a> RWS <a>allow-list</a>
<dfn>feature-identifier</dfn> = 1*( ALPHA / DIGIT / "-")
<dfn>allow-list</dfn> = <a>allow-list-value</a> *(RWS <a>allow-list-value</a>)
<dfn>allow-list-value</dfn> = <a>serialized-origin</a> / "*" / "'self'" / "'src'" / "'none'"
<dfn>allow-list-value</dfn> = <a>serialized-origin</a> / <a>serialized-origin-with-wildcard-subdomain</a> / "*" / "'self'" / "'src'" / "'none'"
</pre>
<p><dfn><code>serialized-origin</code></dfn> is the
<a>serialization of an origin</a>. However, the code points U+0027 ('),
U+0021 (*), U+002C (,) and U+003B (;) MUST NOT appear in the serialization.
If they are required, they must be percent-encoded as "`%27`", "`%2A`",
"`%2C`" or "`%3B`", respectively.</p>
<p><dfn><code>serialized-origin-with-wildcard-subdomai</code></dfn> is a
arichiv marked this conversation as resolved.
Show resolved Hide resolved
<a>serialized-origin</a> with (1) a <a>registrable domain</a> for the <a>host</a>
arichiv marked this conversation as resolved.
Show resolved Hide resolved
and (2) a "*." inserted before the <a>host</a> in the serialization.</p>
<div class="note">
The string "<code>'self'</code>" may be used as an origin in an allowlist.
When it is used in this way, it will refer to the origin of the document
Expand Down