From 58d6ae468da691f42268b239783de7a9646dd2f5 Mon Sep 17 00:00:00 2001 From: Christian Biesinger Date: Mon, 26 Sep 2022 20:10:33 -0400 Subject: [PATCH] Add a destination type for FedCM We think it makes sense to define a destination type specific to FedCM requests (https://fedidcg.github.io/FedCM/) This would replace the Sec-FedCM-CSRF header that is currently in the FedCM spec. --- fetch.bs | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/fetch.bs b/fetch.bs index 7841091d7..e8f233262 100644 --- a/fetch.bs +++ b/fetch.bs @@ -1517,6 +1517,7 @@ the empty string, "style", "track", "video", +"webidentity", "worker", or "xslt". Unless stated otherwise it is the empty string. @@ -1548,7 +1549,7 @@ not always relevant and might require different behavior. CSP directive Features - "" + "" "report" — CSP, NEL reports. @@ -1611,6 +1612,10 @@ not always relevant and might require different behavior. "sharedworker" child-src, script-src, worker-src SharedWorker + + "webidentity" + connect-src + Federated Credential Management requests "worker" child-src, script-src, worker-src