Commit 0ac47073 authored by Sam Drew's avatar Sam Drew
Browse files

Remove REQ-STORE-ACC-3

parent 97f7ea1d
Loading
Loading
Loading
Loading
+0 −4
Original line number Diff line number Diff line
@@ -153,8 +153,6 @@ public suffix list: list of all eTLDs

registrable domain: subdomain exactly one level below an eTLD, such that the domain and all further sub-domains are registered to a single tenant

rendering processes: processes or other execution contexts, that handle the execution or rendering of website assets

site: logical security boundary defined by scheme and registrable domain

third-party cookies: cookies keyed to a site other than the top-level site
@@ -465,8 +463,6 @@ Example: Permissions divided such that an extension can request and access the m

**[REQ-STORE-ACC-2]** The product shall not share or make data available across browser profiles.

**[REQ-STORE-ACC-3]** The product shall enforce Same Origin Policy access control for storage data outside rendering processes.

**[REQ-SOP-AAC-1]**: The product shall deny access in one origin to all parts of another origin, except as defined in the user documentation.

Example: Web pages may load images from other origins, message using `window.postMessage` and may access limited properties such as `Location`. Web pages may not access the document object model or global Window scope from scripts of other origins. The user documentation references industry standards with implementation recommendations and additinal examples.