Add onsecuritypolicyviolation to Window and Document?

[hamishwillee]

I added onsecuritypolicyviolation to the global handlers in #12289.

However I "think" that onsecuritypolicyviolation is also needed in BCD on Window and Document too. Can you please confirm? Reasoning below.

The Window and Document handlers were in the spec before being added to the global handlers.

• Testing shows that onsecuritypolicyviolation is present on Chrome in Window and Document (but not in elements). i.e. it implements these
• Notes indicate it is present Document in Safari but not Window
• For completeness, FF92 did not implement these.

If these do need a BCD entry, what versions could be used? Just set to true, false appropriately? We can kind of guess at these from SecurityPolicyViolationEvent but it would be a guess - because we know this guess does not work for Firefox.

[Elchi3]

This issue seems to be an instance of #12290. I don't have an answer yet, linking this for inspiration/context.

[hamishwillee]

@Elchi3 Well, there is no way I can reflect the right versions that onsecuritypolicyviolation are available on Window and Document using GlobalEventHandlers. So from correctness of the data it certainly makes sense to split them out.

However I will leave this alone until a decision is made.

[Elchi3]

The data structures here were updated in #16728 to add the event on Window and Document.

It seems that more research on the data is needed and that was filed as #16992. Closing here. Continue in #16992.