Commit 325c275e authored by Andrew Whalley's avatar Andrew Whalley
Browse files

Apply 1 suggestion(s) to 1 file(s)

parent ede62584
Loading
Loading
Loading
Loading
+3 −1
Original line number Diff line number Diff line
@@ -645,7 +645,9 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P

<mark>Editor's note: Discussion around this was not concluded. HAS did not like asking for technical docs. Sam raised asking for user docs instead. Andrew suggested that in some circumstances it's not needed at all, eg explicit cooperation between client and server. Daniel E had concerns about lowering the bar even in cooperation contexts.</mark>

**[REQ-PWR-IM-1]** The web browser shall implement a permissions policy framework that allows a top-level website to selectively limit or delegate to embedded iframes the Powerful Web Platform Features it has been granted access to.
**[REQ-PWR-IM-1]** The product shall implement a permissions policy framework that allows a top-level website to selectively limit the Powerful Web Platform Features available to itself and any embedded iframes.

**[REQ-PWR-IM-2]** The product shall implement a permissions policy framework that allows a top-level website to explicitly delegate access to specific Powerful Web Platform Features to embedded iframes.

## 5.11 Minimisation of Attack Surfaces