diff --git a/source b/source index 07296f7c4ae..d7d89833dfe 100644 --- a/source +++ b/source @@ -92621,8 +92621,8 @@ interface BarProp {

To set up a window environment settings object, given a URL creationURL, a JavaScript execution context execution context, null or an environment reservedEnvironment, a URL - topLevelCreationURL, and an origin topLevelOrigin, run these - steps:

+ topLevelCreationURL, an origin topLevelOrigin, and a + boolean hasCrossSiteAncestor:

  1. Let realm be the value of execution context's Realm @@ -92660,30 +92660,6 @@ interface BarProp { associated Document.

    -
    The has cross-site - ancestor
    -
    -
      -

    1. If window's navigable's parent is null, then return false.

      2. - -

    2. Let parentDocument be window's navigable's parent's active - document.

      3. - -

    3. If parentDocument's relevant settings object's has cross-site ancestor is - true, then return true.

      4. - -

    4. If parentDocument's origin - is not same site with window's associated Document's origin, then return true.

      5. - -

    5. Return false.

      6. -
    -
    -
    The policy container

    Return the policy container of @@ -92748,8 +92724,10 @@ interface BarProp {

  2. Set settings object's creation URL to creationURL, settings object's top-level creation - URL to topLevelCreationURL, and settings object's top-level - origin to topLevelOrigin.

    3. + URL to topLevelCreationURL, settings object's top-level + origin to topLevelOrigin, and settings object's has cross-site ancestor to + hasCrossSiteAncestor.

  3. Set realm's [[HostDefined]] field to settings object.

@@ -100111,9 +100089,25 @@ interface NotRestoredReasons { otherwise embedder's relevant settings object's top-level origin.

+

  • Let hasCrossSiteAncestor be false.

    • + +
  • +

    If embedder is not null:

    + +
      +

    1. If origin is same site with embedder's + relevant settings object's origin, then set hasCrossSiteAncestor + to embedder's relevant settings object's has cross-site ancestor.

      2. + +

    2. Otherwise, set hasCrossSiteAncestor to true.

      3. +
    +
    • +

  • Set up a window environment settings object with about:blank, - realm execution context, null, topLevelCreationURL, and - topLevelOrigin.

    • + realm execution context, null, topLevelCreationURL, + topLevelOrigin, and hasCrossSiteAncestor.

  • Let loadTimingInfo be a new document load timing info with its navigation start time set to the result of calling coarsen time @@ -104209,6 +104203,8 @@ location.href = '#foo';

  • Let topLevelOrigin be null.

    • +

  • Let hasCrossSiteAncestor be false.

    • +

  • If navigable is not a top-level traversable, then:

    @@ -104222,6 +104218,14 @@ location.href = '#foo';

  • Set topLevelOrigin to parentEnvironment's top-level origin.

    • + +

  • If parentEnvironment's origin is same site with + currentURL's origin, then set + hasCrossSiteAncestor to parentEnvironment's has cross-site ancestor.

    • + +

  • Otherwise, set hasCrossSiteAncestor to true.

    • @@ -104232,8 +104236,10 @@ location.href = '#foo'; data-x="concept-environment-target-browsing-context">target browsing context is navigable's active browsing context, creation URL is currentURL, - top-level creation URL is topLevelCreationURL, and top-level - origin is topLevelOrigin.

    + top-level creation URL is topLevelCreationURL, top-level + origin is topLevelOrigin, and has cross-site ancestor is + hasCrossSiteAncestor.

    The created environment's active service worker is set in @@ -106737,6 +106743,8 @@ location.href = '#foo';

  • Let topLevelOrigin be navigationParams's origin.

    • +

  • Let hasCrossSiteAncestor be false.

    • +

  • If navigable's container is not null, then:

    @@ -106750,13 +106758,22 @@ location.href = '#foo';

  • Set topLevelOrigin to parentEnvironment's top-level origin.

    • + +

  • If navigationParams's origin is same site with + parentEnvironment's origin, + then set hasCrossSiteAncestor to parentEnvironment's has cross-site ancestor.

    • + +

  • Otherwise, set hasCrossSiteAncestor to true

  • Set up a window environment settings object with creationURL, realmExecutionContext, navigationParams's reserved environment, - topLevelCreationURL, and topLevelOrigin.

    • + topLevelCreationURL, topLevelOrigin, and + hasCrossSiteAncestor.

    This is the usual case, where the new Document we're about to @@ -108624,6 +108641,17 @@ new PaymentRequest(…); // Allowed to use involved.

    +
    A has + cross-site ancestor
    +

    A boolean. For window environment settings + objects this will be set to true if an ancestor frame has an origin that is not same site + with the current window's origin and + otherwise false.

    +

    For workers and worklets it should be set to the has cross-site ancestor of its + creator, but we don't gave a definition for they yet due to a circular dependencey.

    +
    A target browsing context

    Null or a target browsing context for a An origin used in security checks.

    -
    A has cross-site ancestor
    -

    A boolean used in security checks.

    -
    A policy container
    @@ -123514,23 +123538,6 @@ interface SharedWorkerGlobalScope : WorkerGlobalScope origin otherwise.

    -
    The has cross-site - ancestry
    -
    -
      -

    1. If outside settings's has cross-site ancestor is - true, then return true.

      2. - -

    2. If worker global scope's url's scheme is "data", then return - true.

      3. - -

    3. Return false.

      4. -
    -
    -
    The policy container

    Return worker global scope's SharedWorkerGlobalScope : WorkerGlobalScope unique opaque string, creation URL to worker global scope's url, top-level creation URL to null, target browsing context to - null, and active service worker - to null.

    + null, active service worker + to null, and has cross-site + ancestor to outside settings's has cross-site ancestor.

  • If worker global scope is a DedicatedWorkerGlobalScope object, then set settings object's top-level origin to outside @@ -124813,10 +124822,6 @@ interface WorkletGlobalScope {};

    Return origin.

    • -
    The has cross-site - ancestor
    -

    Return true.

    -
    The policy container

    Return inheritedPolicyContainer.