Contexts - Revision history

GPHemsley: Add link to Fetch section

2015-04-01T12:30:17Z

Add link to Fetch section

← Older revision		Revision as of 12:30, 1 April 2015
Line 191:		Line 191:
	* What about CSS masks?		* What about CSS masks?
	* What about CSS shapes?		* What about CSS shapes?

			== See also ==

			* [https://fetch.spec.whatwg.org/#concept-request-context Fetch Standard: request context]

	[[Category:Spec coordination]]		[[Category:Spec coordination]]

Zcorpan: /* Context triggers */ Add css-font-loading API

2015-03-31T12:58:12Z

Context triggers: Add css-font-loading API

← Older revision		Revision as of 12:58, 31 March 2015
Line 171:		Line 171:
	\| —		\| —
	\| <code>@font-face</code>		\| <code>@font-face</code>
	\|		\| FontFace#load(), FontFaceSet#load()
	\|-		\|-
	! text track		! text track

Zcorpan: /* Context types */ plugins are scriptable

2015-03-31T12:54:59Z

Context types: plugins are scriptable

← Older revision		Revision as of 12:54, 31 March 2015
Line 69:		Line 69:
	\| Yes		\| Yes
	\| No?		\| No?
	\| Yes?		\| Yes
	\| [https://w3c.github.io/webappsec/specs/content-security-policy/#object-src <code>object-src</code>]		\| [https://w3c.github.io/webappsec/specs/content-security-policy/#object-src <code>object-src</code>]
	\|		\|

GPHemsley: /* Context triggers */ +Triggers

2014-07-27T22:42:01Z

Context triggers: +Triggers

← Older revision		Revision as of 22:42, 27 July 2014
Line 126:		Line 126:
	! HTML Triggers		! HTML Triggers
	! CSS Triggers		! CSS Triggers
	! Other		! Other Triggers
	\|-		\|-
	! browsing		! browsing

GPHemsley: /* Context types */ Update CSP links.

2014-07-27T22:41:39Z

Context types: Update CSP links.

← Older revision		Revision as of 22:41, 27 July 2014
Line 35:		Line 35:
	\| No?		\| No?
	\| Yes		\| Yes
	\| [https://~~dvcs~~.w3.~~org~~/hg/content-security-policy/~~raw-file/tip/csp-specification.dev.html~~#frame-src <code>frame-src</code>]		\| [https://w3c.github.io/webappsec/specs/content-security-policy/#frame-src <code>frame-src</code>]
	\|		\|
	\|-		\|-
Line 43:		Line 43:
	\| No?		\| No?
	\| Yes?		\| Yes?
	\| [https://~~dvcs~~.w3.~~org~~/hg/content-security-policy/~~raw-file/tip/csp-specification.dev.html~~#connect-src <code>connect-src</code>]		\| [https://w3c.github.io/webappsec/specs/content-security-policy/#connect-src <code>connect-src</code>]
	\|		\|
	\|		\|
Line 52:		Line 52:
	\| Yes		\| Yes
	\| No		\| No
	\| [https://~~dvcs~~.w3.~~org~~/hg/content-security-policy/~~raw-file/tip/csp-specification.dev.html~~#img-src <code>img-src</code>]		\| [https://w3c.github.io/webappsec/specs/content-security-policy/#img-src <code>img-src</code>]
	\|		\|
	\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-images-specifically rules for sniffing images specifically]		\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-images-specifically rules for sniffing images specifically]
Line 61:		Line 61:
	\| No?		\| No?
	\| No		\| No
	\| [https://~~dvcs~~.w3.~~org~~/hg/content-security-policy/~~raw-file/tip/csp-specification.dev.html~~#media-src <code>media-src</code>]		\| [https://w3c.github.io/webappsec/specs/content-security-policy/#media-src <code>media-src</code>]
	\|		\|
	\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-audio-and-video-specifically rules for sniffing audio and video specifically]		\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-audio-and-video-specifically rules for sniffing audio and video specifically]
Line 70:		Line 70:
	\| No?		\| No?
	\| Yes?		\| Yes?
	\| [https://~~dvcs~~.w3.~~org~~/hg/content-security-policy/~~raw-file/tip/csp-specification.dev.html~~#object-src <code>object-src</code>]		\| [https://w3c.github.io/webappsec/specs/content-security-policy/#object-src <code>object-src</code>]
	\|		\|
	\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-in-a-plugin-context rules for sniffing in a plugin context]		\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-in-a-plugin-context rules for sniffing in a plugin context]
Line 79:		Line 79:
	\| Yes?		\| Yes?
	\| No		\| No
	\| [https://~~dvcs~~.w3.~~org~~/hg/content-security-policy/~~raw-file/tip/csp-specification.dev.html~~#style-src <code>style-src</code>]		\| [https://w3c.github.io/webappsec/specs/content-security-policy/#style-src <code>style-src</code>]
	\| @<code>type</code> or "<code>text/css</code>"		\| @<code>type</code> or "<code>text/css</code>"
	\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-in-a-style-context rules for sniffing in a style context]		\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-in-a-style-context rules for sniffing in a style context]
Line 88:		Line 88:
	\| No?		\| No?
	\| Yes?		\| Yes?
	\| [https://~~dvcs~~.w3.~~org~~/hg/content-security-policy/~~raw-file/tip/csp-specification.dev.html~~#script-src <code>script-src</code>]		\| [https://w3c.github.io/webappsec/specs/content-security-policy/#script-src <code>script-src</code>]
	\| @<code>type</code> or "<code>text/javascript</code>"		\| @<code>type</code> or "<code>text/javascript</code>"
	\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-in-a-script-context rules for sniffing in a script context]		\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-in-a-script-context rules for sniffing in a script context]
Line 97:		Line 97:
	\| Yes		\| Yes
	\| No		\| No
	\| [https://~~dvcs~~.w3.~~org~~/hg/content-security-policy/~~raw-file/tip/csp-specification.dev.html~~#font-src <code>font-src</code>]		\| [https://w3c.github.io/webappsec/specs/content-security-policy/#font-src <code>font-src</code>]
	\| <code>format()</code>		\| <code>format()</code>
	\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-fonts-specifically rules for sniffing fonts specifically]		\| [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-fonts-specifically rules for sniffing fonts specifically]

GPHemsley: Can't set the no-sniff flag on a resource until you actually fetch it.

2013-06-24T15:04:30Z

Can't set the no-sniff flag on a resource until you actually fetch it.

← Older revision		Revision as of 15:04, 24 June 2013
Line 3:		Line 3:
	# Identify context.		# Identify context.
	# Determine whether to fetch resource based on CSP directives and type hint, if any.		# Determine whether to fetch resource based on CSP directives and type hint, if any.
	~~# Set no-sniff flag on resource, if necessary.~~
	# Fetch resource.		# Fetch resource.
			# Set no-sniff flag on resource (based on URL), if necessary.
	# Handle resource.		# Handle resource.
	# Sniff resource.		# Sniff resource.

GPHemsley: /* Context triggers */ This list should include obsolete triggers like , too.

2013-06-23T18:42:28Z

Context triggers: This list should include obsolete triggers like <frame>, too.

← Older revision		Revision as of 18:42, 23 June 2013
Line 134:		Line 134:
	\|-		\|-
	! nested browsing		! nested browsing
	\| <code><iframe></code>, <code><object></code> (sometimes)		\| <code><iframe></code>, <code><object></code> (sometimes), <code><frame></code>
	\|		\|
	\|		\|

GPHemsley: /* Context triggers */ CSS does not trigger the text track or cache manifest contexts.

2013-06-23T18:39:07Z

Context triggers: CSS does not trigger the text track or cache manifest contexts.

← Older revision		Revision as of 18:39, 23 June 2013
Line 175:		Line 175:
	! text track		! text track
	\| <code><track></code>		\| <code><track></code>
	\|		\| —
	\|		\|
	\|-		\|-
	! cache manifest		! cache manifest
	\| <code><html manifest></code>		\| <code><html manifest></code>
	\|		\| —
	\|		\|
	\|}		\|}

GPHemsley: Rearrange sections.

2013-06-23T18:18:23Z

Rearrange sections.

← Older revision		Revision as of 18:18, 23 June 2013
Line 1:		Line 1:
	== ~~Issues~~ ==		== How to use a context ==

	* What about SVG?		# Identify context.
	* What about XSLT?		# Determine whether to fetch resource based on CSP directives and type hint, if any.
	* document.~~load()? (Seems similar enough to connect-src~~.)		# Set no-sniff flag on resource, if necessary.
	* What about CSS masks?		# Fetch resource.
	* What about CSS shapes?		# Handle resource.
			# Sniff resource.
			# Process and display resource or prompt to download resource, as appropriate.

	== Context types ==		== Context types ==
Line 117:		Line 119:
	\|		\|
	\|}		\|}

	~~== How to use a context ==~~

	~~# Identify context.~~
	~~# Determine whether to fetch resource based on CSP directives and type hint, if any.~~
	~~# Set no-sniff flag on resource, if necessary.~~
	~~# Fetch resource.~~
	~~# Handle resource.~~
	~~# Sniff resource.~~
	~~# Process and display resource or prompt to download resource, as appropriate.~~

	== Context triggers ==		== Context triggers ==
Line 192:		Line 184:
	\|}		\|}

			== Issues ==

			* What about SVG?
			* What about XSLT?
			* document.load()? (Seems similar enough to connect-src.)
			* What about CSS masks?
			* What about CSS shapes?

	[[Category:Spec coordination]]		[[Category:Spec coordination]]

GPHemsley: Add some triggers for various context types.

2013-06-23T18:16:15Z

Add some triggers for various context types.

@@ Line 6: / Line 6: @@
 * What about CSS masks?
 * What about CSS shapes?
 == Context types ==
@@ Line 38: / Line 36: @@
+|
 |-
-| connection (EventSource, WebSocket, XMLHttpRequest)
+| connection
+|
 | Yes
@@ Line 98: / Line 96: @@
 | No
 | [https://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-specification.dev.html#font-src <code>font-src</code>]
-| <code>format</code>()
+| <code>format()</code>
 | [http://mimesniff.spec.whatwg.org/#rules-for-sniffing-fonts-specifically rules for sniffing fonts specifically]
 |-
@@ Line 129: / Line 127: @@
 # Sniff resource.
 # Process and display resource or prompt to download resource, as appropriate.
 [[Category:Spec coordination]]