|
7 | 7 | <link href="https://www.w3.org/StyleSheets/TR/2021/W3C-WD" rel="stylesheet">
|
8 | 8 | <meta content="Bikeshed version 618007319, updated Thu Jun 26 17:23:55 2025 -0700" name="generator">
|
9 | 9 | <link href="https://www.w3.org/TR/CSP3/" rel="canonical">
|
10 |
| - <meta content="1137e96ef04505473d5a2cb457c6afd54795041f" name="revision"> |
| 10 | + <meta content="9dd7cf143bf948b85ff0855214538cc89fece1ed" name="revision"> |
11 | 11 | <meta content="dark light" name="color-scheme">
|
12 | 12 | <link href="https://www.w3.org/StyleSheets/TR/2021/dark.css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css">
|
13 | 13 | <style>
|
|
775 | 775 | </p>
|
776 | 776 | <h1>Content Security Policy Level 3</h1>
|
777 | 777 | <p id="w3c-state"><a href="https://www.w3.org/standards/types/#WD">W3C Working Draft</a>,
|
778 |
| - <time class="dt-updated" datetime="2025-07-10">10 July 2025</time></p> |
| 778 | + <time class="dt-updated" datetime="2025-07-11">11 July 2025</time></p> |
779 | 779 | <details open>
|
780 | 780 | <summary>More details about this document</summary>
|
781 | 781 | <div data-fill-with="spec-metadata">
|
782 | 782 | <dl>
|
783 | 783 | <dt>This version:
|
784 |
| - <dd><a class="u-url" href="https://www.w3.org/TR/2025/WD-CSP3-20250710/">https://www.w3.org/TR/2025/WD-CSP3-20250710/</a> |
| 784 | + <dd><a class="u-url" href="https://www.w3.org/TR/2025/WD-CSP3-20250711/">https://www.w3.org/TR/2025/WD-CSP3-20250711/</a> |
785 | 785 | <dt>Latest published version:
|
786 | 786 | <dd><a href="https://www.w3.org/TR/CSP3/">https://www.w3.org/TR/CSP3/</a>
|
787 | 787 | <dt>Editor's Draft:
|
@@ -4956,8 +4956,8 @@ <h5 class="heading settled algorithm" data-algorithm="Does integrity metadata ma
|
4956 | 4956 | <li data-md>
|
4957 | 4957 | <p>If <var>integrity expressions</var> is empty, return "<code>Does Not Match</code>".</p>
|
4958 | 4958 | <li data-md>
|
4959 |
| - <p>Let <var>integrity sources</var> be the result of executing the algorithm defined |
4960 |
| - in <a href="https://www.w3.org/TR/sri-2/#parse-metadata-section"><cite>SRI</cite> § 3.3.2 Parse metadata</a> on <var>integrity metadata</var>. <a data-link-type="biblio" href="#biblio-sri" title="Subresource Integrity">[SRI]</a></p> |
| 4959 | + <p>Let <var>integrity sources</var> be the result of <a data-link-type="dfn" href="https://www.w3.org/TR/sri-2/#parse-metadata" id="ref-for-parse-metadata">parsing metadata</a> given |
| 4960 | + <var>integrity metadata</var>. <a data-link-type="biblio" href="#biblio-sri" title="Subresource Integrity">[SRI]</a></p> |
4961 | 4961 | <li data-md>
|
4962 | 4962 | <p>If <var>integrity sources</var> is "<code>no metadata</code>" or an empty set, return "<code>Does Not Match</code>".</p>
|
4963 | 4963 | <li data-md>
|
@@ -6859,6 +6859,11 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
|
6859 | 6859 | <ul>
|
6860 | 6860 | <li><span class="dfn-paneled" id="61dccdaf">applying algorithm to bytes</span>
|
6861 | 6861 | </ul>
|
| 6862 | + <li> |
| 6863 | + <a data-link-type="biblio">[SRI-2]</a> defines the following terms: |
| 6864 | + <ul> |
| 6865 | + <li><span class="dfn-paneled" id="a2e9fd6d">parse metadata</span> |
| 6866 | + </ul> |
6862 | 6867 | <li>
|
6863 | 6868 | <a data-link-type="biblio">[TRUSTED-TYPES]</a> defines the following terms:
|
6864 | 6869 | <ul>
|
@@ -7454,6 +7459,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
|
7454 | 7459 | "a1288f2a": {"dfnID":"a1288f2a","dfnText":"password","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-url-password"}],"title":"5.4. Strip URL for use in reports"}],"url":"https://url.spec.whatwg.org/#concept-url-password"},
|
7455 | 7460 | "a13a702f": {"dfnID":"a13a702f","dfnText":"SharedWorker","external":true,"refSections":[{"refs":[{"id":"ref-for-sharedworker"}],"title":"6.1.1. child-src"},{"refs":[{"id":"ref-for-sharedworker\u2460"}],"title":"6.2.2. worker-src"}],"url":"https://html.spec.whatwg.org/multipage/workers.html#sharedworker"},
|
7456 | 7461 | "a23d12a9": {"dfnID":"a23d12a9","dfnText":"scheme","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-origin-scheme"},{"id":"ref-for-concept-origin-scheme\u2460"}],"title":"6.7.2.8. \n Does url match expression in origin with redirect count?\n "}],"url":"https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-scheme"},
|
| 7462 | +"a2e9fd6d": {"dfnID":"a2e9fd6d","dfnText":"parse metadata","external":true,"refSections":[{"refs":[{"id":"ref-for-parse-metadata"}],"title":"6.7.2.4. \n Does integrity metadata match source list?\n "}],"url":"https://www.w3.org/TR/sri-2/#parse-metadata"}, |
7457 | 7463 | "a32c65d4": {"dfnID":"a32c65d4","dfnText":"implements","external":true,"refSections":[{"refs":[{"id":"ref-for-implements"},{"id":"ref-for-implements\u2460"}],"title":"4.4.1. \n EnsureCSPDoesNotBlockStringCompilation(realm, parameterStrings, bodyString, codeString, compilationType, parameterArgs, bodyArg)\n "},{"refs":[{"id":"ref-for-implements\u2461"}],"title":"5.5. \n Report a violation\n "}],"url":"https://webidl.spec.whatwg.org/#implements"},
|
7458 | 7464 | "a33db89a": {"dfnID":"a33db89a","dfnText":"fetch","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-fetch"}],"title":"5.5. \n Report a violation\n "}],"url":"https://fetch.spec.whatwg.org/#concept-fetch"},
|
7459 | 7465 | "a37f05fd": {"dfnID":"a37f05fd","dfnText":"strip leading and trailing ASCII whitespace","external":true,"refSections":[{"refs":[{"id":"ref-for-strip-leading-and-trailing-ascii-whitespace"}],"title":"2.2.1. \n Parse a serialized CSP\n "}],"url":"https://infra.spec.whatwg.org/#strip-leading-and-trailing-ascii-whitespace"},
|
@@ -8441,6 +8447,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
|
8441 | 8447 | "https://www.w3.org/TR/reporting-1/#generate-and-queue-a-report": {"displayText":"generate and queue a report","export":true,"for_":[],"level":"1","normative":true,"shortname":"reporting","spec":"reporting-1","status":"snapshot","text":"generate and queue a report","type":"dfn","url":"https://www.w3.org/TR/reporting-1/#generate-and-queue-a-report"},
|
8442 | 8448 | "https://www.w3.org/TR/reporting-1/#reportbody": {"displayText":"ReportBody","export":true,"for_":[],"level":"1","normative":true,"shortname":"reporting","spec":"reporting-1","status":"snapshot","text":"ReportBody","type":"dictionary","url":"https://www.w3.org/TR/reporting-1/#reportbody"},
|
8443 | 8449 | "https://www.w3.org/TR/service-workers/#serviceworker": {"displayText":"ServiceWorker","export":true,"for_":[],"level":"1","normative":true,"shortname":"service-workers","spec":"service-workers","status":"snapshot","text":"ServiceWorker","type":"interface","url":"https://www.w3.org/TR/service-workers/#serviceworker"},
|
| 8450 | +"https://www.w3.org/TR/sri-2/#parse-metadata": {"displayText":"parse metadata","export":true,"for_":[],"level":"2","normative":true,"shortname":"sri","spec":"sri-2","status":"snapshot","text":"parse metadata","type":"dfn","url":"https://www.w3.org/TR/sri-2/#parse-metadata"}, |
8444 | 8451 | "https://www.w3.org/TR/trusted-types/#abstract-opdef-does-sink-type-require-trusted-types": {"displayText":"Does sink type require trusted types?","export":true,"for_":[],"level":"1","normative":true,"shortname":"trusted-types","spec":"trusted-types","status":"snapshot","text":"Does sink type require trusted types?","type":"abstract-op","url":"https://www.w3.org/TR/trusted-types/#abstract-opdef-does-sink-type-require-trusted-types"},
|
8445 | 8452 | "https://www.w3.org/TR/trusted-types/#abstract-opdef-get-trusted-type-compliant-string": {"displayText":"Get Trusted Type compliant string","export":true,"for_":[],"level":"1","normative":true,"shortname":"trusted-types","spec":"trusted-types","status":"snapshot","text":"Get Trusted Type compliant string","type":"abstract-op","url":"https://www.w3.org/TR/trusted-types/#abstract-opdef-get-trusted-type-compliant-string"},
|
8446 | 8453 | "https://www.w3.org/TR/trusted-types/#trustedscript": {"displayText":"TrustedScript","export":true,"for_":[],"level":"1","normative":true,"shortname":"trusted-types","spec":"trusted-types","status":"snapshot","text":"TrustedScript","type":"interface","url":"https://www.w3.org/TR/trusted-types/#trustedscript"},
|
|
0 commit comments