From 8edfe6da5a635f1c31f3ea22f2d323adc33b938e Mon Sep 17 00:00:00 2001
From: Ian Hickson
This happens without any Any navigation required of the user agent in the process
the unload
events firing
(the nested browsing context and its Document
are discarded, not data-x="unload a
@@ -19868,7 +19868,7 @@ 4.8.6 The
iframe
elementiframe
attributes algorithm must be completed as an explicit
self-navigation override and with the iframe
element's document's
- browsing context as the source browsing context.
Furthermore, if the active document of the element's child browsing
context before such a navigation was not completely
@@ -19904,14 +19904,14 @@ 4.8.6 The
access control policies that are stricter than those described above to mitigate this attack, but
unfortunately such policies are typically not compatible with existing Web content.iframe
element
When the iframe
's browsing context's active document is
+
When the iframe
's browsing context's active document is
not ready for post-load tasks, and when anything in the iframe
is delaying the load event of the iframe
's
- browsing context's active document, and when the iframe
's
- browsing context is in the delaying load
events
+ browsing context's active document, and when the iframe
's
+ browsing context is in the delaying load
events
mode, the iframe
must delay the load event of its document.
If, during the handling of the load
event, the
- browsing context in the iframe
is again navigated, that will further delay the load event.
iframe
is again navigated, that will further delay the load event.
@@ -19937,7 +19937,7 @@ iframe
elementWhenever the name
attribute is set, the nested
- browsing context's name must be changed to
+ browsing context's name must be changed to
the new value. If the attribute is removed, the browsing context name must be set to
the empty string.
iframe
elementWhen the attribute is set, the content is treated as being from a unique origin,
forms, scripts, and various potentially annoying APIs are disabled, links are prevented from
- targeting other browsing contexts, and plugins are secured.
+ targeting other browsing contexts, and plugins are secured.
The allow-same-origin
keyword causes
the content to be treated as being from its real origin instead of forcing it into a unique
origin; the allow-top-navigation
@@ -20067,7 +20067,7 @@
iframe
elementThe seamless
attribute is a boolean
attribute. When specified, it indicates that the iframe
element's
- browsing context is to be rendered in a manner that makes it appear to be part of the
+ browsing context is to be rendered in a manner that makes it appear to be part of the
containing document (seamlessly included in the parent document).
iframe
elementiframe
element's Document
, or
- iframe
element's Document
, or
- iframe
srcdoc
document.
iframe
elementThe user agent must set the seamless browsing context flag to true for that
- browsing context. This will cause links to open in the
+ browsing context. This will cause links to open in the
parent browsing context unless an explicit self-navigation override is used
- (target="_self"
).
Media queries in the context of the iframe
's browsing context
+ (target="_self"
).
Media queries in the context of the If the attribute is not specified, or if the origin conditions listed above are
not met, then the user agent should render the nested browsing context in a manner
- that is clearly distinguishable as a separate browsing context, and the
- seamless browsing context flag must be set to false for that browsing
+ that is clearly distinguishable as a separate browsing context, and the
+ seamless browsing context flag must be set to false for that browsing
context. It is important that user agents recheck the above conditions whenever the
@@ -20199,7 +20199,7 @@ The An When an When an This happens without any Any navigation required of the user agent in the process
the Furthermore, if the active document of the element's child browsing
context before such a navigation was not completely
@@ -19904,14 +19904,14 @@ href="?audio">audio</a> test instead.)</p>
access control policies that are stricter than those described above to mitigate this attack, but
unfortunately such policies are typically not compatible with existing Web content. When the When the If, during the handling of the Whenever the When the attribute is set, the content is treated as being from a unique origin,
forms, scripts, and various potentially annoying APIs are disabled, links are prevented from
- targeting other browsing contexts, and plugins are secured.
+ targeting other browsing contexts, and plugins are secured.
The The The user agent must set the seamless browsing context flag to true for that
- browsing context. This will cause links to open in the
+ browsing context. This will cause links to open in the
parent browsing context unless an explicit self-navigation override is used
- ( Media queries in the context of the Media queries in the context of the If the attribute is not specified, or if the origin conditions listed above are
not met, then the user agent should render the nested browsing context in a manner
- that is clearly distinguishable as a separate browsing context, and the
- seamless browsing context flag must be set to false for that browsing
+ that is clearly distinguishable as a separate browsing context, and the
+ seamless browsing context flag must be set to false for that browsing
context. It is important that user agents recheck the above conditions whenever the
@@ -20199,7 +20199,7 @@ href="?audio">audio</a> test instead.)</p>
The An When an When an This happens without any iframe
's browsing context
(e.g. on media
attributes of style
elements in
Document
s in that iframe
) must be evaluated with respect to the nearest
ancestor browsing context that is not itself being nested through an iframe
that is in seamless
@@ -20176,8 +20176,8 @@ 4.8.6 The
iframe
element4.8.6 The
iframe
elementallowfullscreen
attribute is a
boolean attribute. When specified, it indicates that Document
objects in
- the iframe
element's browsing context are to be allowed to use requestFullscreen()
(if it's not blocked for other
+ the iframe
element's browsing context are to be allowed to use requestFullscreen()
(if it's not blocked for other
reasons, e.g. there is another ancestor iframe
without this attribute set).4.8.6 The
embedded content has specific dimensions (e.g. ad units have well-defined dimensions).
iframe
elementiframe
element never has fallback content, as it will always
- create a nested browsing context, regardless of whether the specified initial
+ create a nested browsing context, regardless of whether the specified initial
contents are successfully used.
iframe
element is inserted
- into a document, the user agent must create a nested browsing context, and
+ into a document that has a browsing context, the user agent must create a nested browsing context, and
then process the iframe
attributes for the "first time".iframe
element is removed
- from a document, the user agent must discard the nested browsing context.unload
events firing
(the nested browsing context and its Document
are discarded, not data-x="unload a
@@ -19868,7 +19868,7 @@ href="?audio">audio</a> test instead.)</p>
iframe
attributes algorithm must be completed as an explicit
self-navigation override and with the iframe
element's document's
- browsing context as the source browsing context.iframe
's browsing context's active document is
+ iframe
's browsing context's active document is
not ready for post-load tasks, and when anything in the iframe
is delaying the load event of the iframe
's
- browsing context's active document, and when the iframe
's
- browsing context is in the delaying load
events
+ browsing context's active document, and when the iframe
's
+ browsing context is in the delaying load
events
mode, the iframe
must delay the load event of its document.load
event, the
- browsing context in the iframe
is again navigated, that will further delay the load event.iframe
is again navigated, that will further delay the load event.
@@ -19937,7 +19937,7 @@ href="?audio">audio</a> test instead.)</p>
name
attribute is set, the nested
- browsing context's name must be changed to
+ browsing context's name must be changed to
the new value. If the attribute is removed, the browsing context name must be set to
the empty string.allow-same-origin
keyword causes
the content to be treated as being from its real origin instead of forcing it into a unique
origin; the allow-top-navigation
@@ -20067,7 +20067,7 @@ href="?audio">audio</a> test instead.)</p>
seamless
attribute is a boolean
attribute. When specified, it indicates that the iframe
element's
- browsing context is to be rendered in a manner that makes it appear to be part of the
+ browsing context is to be rendered in a manner that makes it appear to be part of the
containing document (seamlessly included in the parent document).
@@ -20126,9 +20126,9 @@ href="?audio">audio</a> test instead.)</p>
requirements apply:
iframe
element's Document
, or
- iframe
element's Document
, or
- iframe
srcdoc
document.
target="_self"
).iframe
's browsing context
+ (target="_self"
).iframe
's browsing context
(e.g. on media
attributes of style
elements in
Document
s in that iframe
) must be evaluated with respect to the nearest
ancestor browsing context that is not itself being nested through an iframe
that is in seamless
@@ -20176,8 +20176,8 @@ href="?audio">audio</a> test instead.)</p>
allowfullscreen
attribute is a
boolean attribute. When specified, it indicates that Document
objects in
- the iframe
element's browsing context are to be allowed to use requestFullscreen()
(if it's not blocked for other
+ the iframe
element's browsing context are to be allowed to use requestFullscreen()
(if it's not blocked for other
reasons, e.g. there is another ancestor iframe
without this attribute set).iframe
element never has fallback content, as it will always
- create a nested browsing context, regardless of whether the specified initial
+ create a nested browsing context, regardless of whether the specified initial
contents are successfully used.
iframe
element is inserted
- into a document, the user agent must create a nested browsing context, and
+ into a document that has a browsing context, the user agent must create a nested browsing context, and
then process the iframe
attributes for the "first time".iframe
element is removed
from a document, the user agent must discard the nested browsing context.unload
events firing
(the nested browsing context and its Document
are