Update Feature-Policy header syntax |
|||||
Issue description
We want to implement the new (csp-based) header syntax for the Feature-Policy HTTP header.
So, rather than the JSON:
Feature-Policy: {"fullscreen": ["*"], "usb": [], "payment": ["self", "https://payment.example.com"]}
we would accept
Feature-Policy: fullscreen "*"; usb "none"; payment "self" https://payment.example.com
This should reuse as much of the existing CSP parser as possible, and should end up being the same parser used for the <iframe allow> attribute.
,
Jul 31 2017
Iframe "allow" attribute is also adapting the new syntax. Both header policy and container policy will be using CSP parser, so the work can be either in parallel or one after another.
,
Sep 18 2017
Could the spec be updated: https://wicg.github.io/feature-policy/ Kind of important, considering Chrome 62 will be stable on the 17th October :-)
,
Sep 19 2017
Hi Ian, if I recall correctly, you are working on updating the spec right? Thanks
,
Sep 19 2017
FYI, the new header syntax has already been updated. But spec yet needs to be updated.
,
Nov 27 2017
,
Jan 3 2018
|
|||||
►
Sign in to add a comment |
|||||
Comment 1 by loonyb...@chromium.org
, Jul 31 2017