Permissions Policy report missing a document URL

w3c / webappsec-permissions-policy

A mechanism to selectively enable and disable browser features and APIs

https://w3c.github.io/webappsec-permissions-policy/

Other

399 stars 155 forks source link

Permissions Policy report missing a document URL #536

Closed shhnjk closed 9 months ago

shhnjk commented 9 months ago

The current report structure has a sourceFile. However, the script might be a third-party library, where the site owner does not know where this script is being executed.

The report should include a document URL, which indicates the URL of the document where the violation occured.

shhnjk commented 9 months ago

Never mind, this has been taken care in the reporting API. https://www.w3.org/TR/reporting-1/#queue-report

clelland commented 9 months ago

Yes, sorry I didn't get to this right away; the outer report envelope has some of the universally-useful information that isn't report-type-specific.