|
5 | 5 | <title>Content Security Policy Level 3</title>
|
6 | 6 | <meta content="WD" name="w3c-status">
|
7 | 7 | <link href="https://www.w3.org/StyleSheets/TR/2021/W3C-WD" rel="stylesheet">
|
8 |
| - <meta content="Bikeshed version 742f3d674, updated Mon Nov 4 14:56:54 2024 -0800" name="generator"> |
| 8 | + <meta content="Bikeshed version ac5ea272d, updated Fri Dec 6 15:45:15 2024 -0800" name="generator"> |
9 | 9 | <link href="https://www.w3.org/TR/CSP3/" rel="canonical">
|
10 |
| - <meta content="19c98a2acc722e4e3f6dc271e56be8f08c6a50ca" name="revision"> |
| 10 | + <meta content="398a20e93b94e8590505a05ff3a4fed4b887caad" name="revision"> |
11 | 11 | <meta content="dark light" name="color-scheme">
|
12 | 12 | <link href="https://www.w3.org/StyleSheets/TR/2021/dark.css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css">
|
13 | 13 | <style>
|
|
771 | 771 | <div class="head">
|
772 | 772 | <p data-fill-with="logo"><a class="logo" href="https://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/StyleSheets/TR/2021/logos/W3C" width="72"> </a> </p>
|
773 | 773 | <h1>Content Security Policy Level 3</h1>
|
774 |
| - <p id="w3c-state"><a href="https://www.w3.org/standards/types/#WD">W3C Working Draft</a>, <time class="dt-updated" datetime="2024-12-06">6 December 2024</time></p> |
| 774 | + <p id="w3c-state"><a href="https://www.w3.org/standards/types/#WD">W3C Working Draft</a>, <time class="dt-updated" datetime="2024-12-17">17 December 2024</time></p> |
775 | 775 | <details open>
|
776 | 776 | <summary>More details about this document</summary>
|
777 | 777 | <div data-fill-with="spec-metadata">
|
778 | 778 | <dl>
|
779 | 779 | <dt>This version:
|
780 |
| - <dd><a class="u-url" href="https://www.w3.org/TR/2024/WD-CSP3-20241206/">https://www.w3.org/TR/2024/WD-CSP3-20241206/</a> |
| 780 | + <dd><a class="u-url" href="https://www.w3.org/TR/2024/WD-CSP3-20241217/">https://www.w3.org/TR/2024/WD-CSP3-20241217/</a> |
781 | 781 | <dt>Latest published version:
|
782 | 782 | <dd><a href="https://www.w3.org/TR/CSP3/">https://www.w3.org/TR/CSP3/</a>
|
783 | 783 | <dt>Editor's Draft:
|
@@ -4205,15 +4205,14 @@ <h5 class="heading settled algorithm" data-algorithm="host-part matching" data-l
|
4205 | 4205 | <p>Return "<code>Matches</code>".</p>
|
4206 | 4206 | </ol>
|
4207 | 4207 | <h5 class="heading settled algorithm" data-algorithm="port-part matching" data-level="6.7.2.11" id="match-ports"><span class="secno">6.7.2.11. </span><span class="content"> <code>port-part</code> matching </span><a class="self-link" href="#match-ports"></a></h5>
|
4208 |
| - <p>An <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ascii-string" id="ref-for-ascii-string①⓪">ASCII string</a> <var>input</var> <dfn class="dfn-paneled" data-dfn-type="dfn" data-export id="port-part-matches"><code>port-part</code> matches</dfn> <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url" id="ref-for-concept-url③">URL</a> <var>url</var> if a CSP source expression that |
4209 |
| - contained the first as a <a data-link-type="grammar" href="#grammardef-port-part" id="ref-for-grammardef-port-part②"><code>port-part</code></a> could potentially match a URL containing the latter’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-port" id="ref-for-concept-url-port">port</a> and <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-scheme" id="ref-for-concept-url-scheme①②">scheme</a>. For example, "80" <a data-link-type="dfn" href="#port-part-matches" id="ref-for-port-part-matches①"><code>port-part</code> matches</a> matches http://example.com.</p> |
| 4208 | + <p>An <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ascii-string" id="ref-for-ascii-string①⓪">ASCII string</a> or null <var>input</var> <dfn class="dfn-paneled" data-dfn-type="dfn" data-export id="port-part-matches"><code>port-part</code> matches</dfn> <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url" id="ref-for-concept-url③">URL</a> <var>url</var> if a CSP source expression that contained the first as a <a data-link-type="grammar" href="#grammardef-port-part" id="ref-for-grammardef-port-part②"><code>port-part</code></a> could potentially match a URL containing the latter’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-port" id="ref-for-concept-url-port">port</a> and <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-scheme" id="ref-for-concept-url-scheme①②">scheme</a>. For example, "80" <a data-link-type="dfn" href="#port-part-matches" id="ref-for-port-part-matches①"><code>port-part</code> matches</a> matches http://example.com.</p> |
4210 | 4209 | <ol class="algorithm">
|
4211 | 4210 | <li data-md>
|
4212 |
| - <p class="assertion">Assert: <var>input</var> is the empty string, "*", or a sequence of <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ascii-digit" id="ref-for-ascii-digit">ASCII digits</a>.</p> |
| 4211 | + <p class="assertion">Assert: <var>input</var> is null, "*", or a sequence of one or more <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ascii-digit" id="ref-for-ascii-digit">ASCII digits</a>.</p> |
4213 | 4212 | <li data-md>
|
4214 | 4213 | <p>If <var>input</var> is equal to "*", return "<code>Matches</code>".</p>
|
4215 | 4214 | <li data-md>
|
4216 |
| - <p>Let <var>normalizedInput</var> be null if <var>input</var> is the empty string; otherwise <var>input</var> interpreted as decimal number.</p> |
| 4215 | + <p>Let <var>normalizedInput</var> be null if <var>input</var> null; otherwise <var>input</var> interpreted as decimal number.</p> |
4217 | 4216 | <li data-md>
|
4218 | 4217 | <p>If <var>normalizedInput</var> equals <var>url</var>’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-port" id="ref-for-concept-url-port①">port</a>, return "<code>Matches</code>".</p>
|
4219 | 4218 | <li data-md>
|
@@ -5829,7 +5828,7 @@ <h3 class="no-num no-ref heading settled" id="normative"><span class="content">N
|
5829 | 5828 | <dt id="biblio-sri">[SRI]
|
5830 | 5829 | <dd>Devdatta Akhawe; et al. <a href="https://www.w3.org/TR/SRI/"><cite>Subresource Integrity</cite></a>. 23 June 2016. REC. URL: <a href="https://www.w3.org/TR/SRI/">https://www.w3.org/TR/SRI/</a>
|
5831 | 5830 | <dt id="biblio-trusted-types">[TRUSTED-TYPES]
|
5832 |
| - <dd>Krzysztof Kotowicz. <a href="https://www.w3.org/TR/trusted-types/"><cite>Trusted Types</cite></a>. 18 November 2024. WD. URL: <a href="https://www.w3.org/TR/trusted-types/">https://www.w3.org/TR/trusted-types/</a> |
| 5831 | + <dd>Krzysztof Kotowicz. <a href="https://www.w3.org/TR/trusted-types/"><cite>Trusted Types</cite></a>. 21 November 2024. WD. URL: <a href="https://www.w3.org/TR/trusted-types/">https://www.w3.org/TR/trusted-types/</a> |
5833 | 5832 | <dt id="biblio-url">[URL]
|
5834 | 5833 | <dd>Anne van Kesteren. <a href="https://url.spec.whatwg.org/"><cite>URL Standard</cite></a>. Living Standard. URL: <a href="https://url.spec.whatwg.org/">https://url.spec.whatwg.org/</a>
|
5835 | 5834 | <dt id="biblio-webidl">[WEBIDL]
|
|
0 commit comments