A user account is required in order to edit this wiki, but we've had to disable public user registrations due to spam.
To request an account, ask an autoconfirmed user on Chat (such as one of these permanent autoconfirmed members).
Contexts: Difference between revisions
Jump to navigation
Jump to search
(→Context types: Rearrange columns.) |
(→Context types: Split out nested browsing context for simplicity.) |
||
| Line 14: | Line 14: | ||
|- | |- | ||
| browsing | | browsing | ||
| [http://www.whatwg.org/specs/web-apps/current-work/#browsing-context HTML] | | [http://www.whatwg.org/specs/web-apps/current-work/multipage/#browsing-context HTML] | ||
| Yes | | Yes | ||
| No? | | No? | ||
| Yes | | Yes | ||
| [https://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-specification.dev.html#connect-src <code>connect | | [https://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-specification.dev.html#connect-src <code>connect-src</code>] | ||
| — | | — | ||
| [http://mimesniff.spec.whatwg.org/#mime-type-sniffing-algorithm MIME type sniffing algorithm] | | rowspan="2" | [http://mimesniff.spec.whatwg.org/#mime-type-sniffing-algorithm MIME type sniffing algorithm] | ||
|- | |||
| nested browsing | |||
| [http://www.whatwg.org/specs/web-apps/current-work/multipage/#nested-browsing-context HTML] | |||
| Yes | |||
| No? | |||
| Yes | |||
| [https://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-specification.dev.html#frame-src <code>frame-src</code>] | |||
| | |||
|- | |- | ||
| image | | image | ||
Revision as of 18:43, 5 June 2013
Context types
| Context | Definition | Used in HTML? | Used in CSS? | Scriptable? | CSP Directives | Type Hint | Sniffing Algorithm |
|---|---|---|---|---|---|---|---|
| browsing | HTML | Yes | No? | Yes | connect-src
|
— | MIME type sniffing algorithm |
| nested browsing | HTML | Yes | No? | Yes | frame-src
|
||
| image | Yes | Yes | No | img-src
|
rules for sniffing images specifically | ||
| audio/video | Yes | No? | No | media-src
|
rules for sniffing audio and video specifically | ||
| plugin | Yes | No? | Yes? | object-src
|
|||
| style | Yes | Yes? | No | style-src
|
@type or "text/css"
|
||
| script | Yes | No? | Yes? | script-src
|
@type or "text/javascript"
|
||
| font | No | Yes | No | font-src
|
format()
|
rules for sniffing fonts specifically | |
| text track | Yes | No | No | "text/vtt"
|
|||
| cache manifest | Yes | No | No | "text/cache-manifest"
|
How to use a context
- Identify context.
- Determine whether to fetch resource based on CSP directives and type hint, if any.
- Set no-sniff flag on resource, if necessary.
- Fetch resource.
- Handle resource.
- Sniff resource.
- Process and display resource or prompt to download resource, as appropriate.