Use [=map/for each=] for iteration over authenticator extensions

index.bs

@@ -2356,8 +2356,8 @@ When this operation is invoked, the [=authenticator=] MUST perform the following
             decrypt it.
 1. If any error occurred while creating the new credential object, return an error code equivalent to "{{UnknownError}}" and
     terminate the operation.
-1. Let |processedExtensions| be the result of [=authenticator extension processing=] for each supported [=extension identifier=]/input
-    pair in |extensions|.
+1. Let |processedExtensions| be the result of [=authenticator extension processing=] [=map/for each=] supported <var
+    ignore>extensionId</var> → <var ignore>authenticatorExtensionInput</var> in |extensions|.
 1. If the [=authenticator=] supports:
     <dl class="switch">
         :   a per-[=RP ID=] [=signature counter=]
@@ -2431,8 +2431,8 @@ When this method is invoked, the [=authenticator=] MUST perform the following pr
     If the user does not [=user consent|consent=], return an error code equivalent to
     "{{NotAllowedError}}" and terminate the operation.
 
-1. Let |processedExtensions| be the result of [=authenticator extension processing=] for each supported [=extension
-    identifier=]/input pair in |extensions|.
+1. Let |processedExtensions| be the result of [=authenticator extension processing=] [=map/for each=] supported <var
+    ignore>extensionId</var> → <var ignore>authenticatorExtensionInput</var> in |extensions|.
 1. Increment the [=RP ID=]-associated
     [=signature counter=] or the global [=signature counter=] value, depending on 
     which approach is implemented by the [=authenticator=], by some positive value.