New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 661271 link

Starred by 4 users

Issue metadata

Status: Fixed
Owner:
Closed: Jul 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Android , Windows , Chrome , Mac
Pri: 3
Type: Feature



Sign in to add a comment

Support iframe enable and disable attributes in Feature Policy

Project Member Reported by iclell...@chromium.org, Nov 1 2016

Issue description

Documents should be able to specify 'enable' and 'disable' attributes in <iframe> tags to enable and disable specific features in child frames.

These should follow the algorithms given in the spec, or (until merged) in https://docs.google.com/document/d/1saEBLE6d-qmMxao8Aw6A06oSP3yKdUG7lqMWBYlzEgg/
 
Owner: raymes@chromium.org
Status: Assigned (was: Available)

Comment 2 by kochi@chromium.org, Nov 4 2016

@iclelland Could you fill "Components" field and avoid "Blink"?

Thanks!
(commenting as a part of my blink bug triage sheriff duty)
Components: -Blink Blink>SecurityFeature
I think SecurityFeature is closest though it's not strictly for security?
Components: Blink>FeaturePolicy
Components: -Blink>SecurityFeature
Blocking: -623682
Not blocking launch on this; this is a V2+ feature.
Labels: Feature-Policy-V2

Comment 8 by lunalu@chromium.org, May 26 2017

Isn't this same as iframe allow attribute?

Are we still doing disable attribute?


Currently not, although the full policy attribute is yet to be specced. This could still re-emerge as the best solution (though I think it's unlikely)
Cc: raymes@chromium.org lunalu@chromium.org
Owner: iclell...@chromium.org
Status: Fixed (was: Assigned)
I think iclelland/lunalu basically implemented this now. 

Sign in to add a comment