diff --git a/index.src.html b/index.src.html index 4fd9d56dbf..5d99712b76 100644 --- a/index.src.html +++ b/index.src.html @@ -388,8 +388,8 @@

Infrastructure

Policies

A policy defines allowed - and restricted behaviors, and may be applied to a {{Window}} or {{WorkerGlobalScope}} as described - in [[#initialize-global-object-csp]]. + and restricted behaviors, and may be applied to a {{Window}}, {{WorkerGlobalScope}, or + {{WorkletGlobalScope}} as described in [[#initialize-global-object-csp]]. Each policy has an associated directive set, which is an ordered set of directives that define the policy's implications when applied. @@ -1084,7 +1084,7 @@

Integration with HTML

- 1. The {{Document}} and {{WorkerGlobalScope}} objects have a + 1. The {{Document}}, {{WorkerGlobalScope}}, and {{WorkletGlobalScope}} objects have a CSP list, which holds all the policy objects which are active for a given context. This list is empty unless otherwise specified, and is populated @@ -1223,6 +1223,14 @@

CSP list, insert |policy| into |global|'s CSP list. + 3. If |global| is a {{WorkletGlobalScope}}: + + 1. Let |owner| be |global|'s [=WorkletGlobalScope/owner document=]. + + 2. For each |policy| in |owner|'s CSP list: + + 1. Insert an alias to |policy| in |global|'s CSP list. +

Should |element|'s inline |type| behavior be blocked by Content Security Policy?