WICG / fenced-frame

Proposal for a strong boundary between a page and its embedded content
https://wicg.github.io/fenced-frame/
Other
124 stars 31 forks source link

Spec: Wait for network revocation in nested fenced frames before disabling network. #176

Open blu25 opened 1 month ago

blu25 commented 1 month ago

This PR introduces a new algorithm: Recalculate the untrusted network status of all frames. This is called whenever a fenced frame marks its network as disabled, and checks to see if any ancestor fenced frames are now allowed to have their network access be fully revoked and gain access to unpartitioned data.

This PR modifies disableUntrustedNetwork() to not resolve the promise, and instead puts the promise into the fenced frame config instance to be resolved once the frame tree is considered to have its network fully revoked.

This builds off of the work in https://github.com/WICG/fenced-frame/pull/146, and this should only be merged after https://github.com/WICG/fenced-frame/pull/146 is merged.

See: issue https://github.com/WICG/fenced-frame/issues/168


Preview | Diff