Point mapping of <meta> referrer tag for the legacy 'default' to RP spec#5783
Point mapping of <meta> referrer tag for the legacy 'default' to RP spec#5783domenic merged 3 commits intowhatwg:masterfrom
Conversation
domenic
left a comment
There was a problem hiding this comment.
You seem to have signed up to participate as an individual, but I believe you work in the field of web technologies, so were not able to sign that way. You can instead follow the instructions at https://sites.google.com/a/google.com/web-standards/home/standards-organizations/whatwg
domenic
left a comment
There was a problem hiding this comment.
LGTM. Tagging as "do not merge yet" until w3c/webappsec-referrer-policy#142 gets merged, but I'm happy to merge when that lands. Great stuff!
Oh, also feel free to add your name to the Acknowledgments section if you'd like! See https://github.com/whatwg/html/blob/master/CONTRIBUTING.md#pull-requests for some more details.
|
@domenic w3c/webappsec-referrer-policy#142 has landed. Can we merge this now please? |
w3c/webappsec-referrer-policy#142 links tests and has the corresponding Referrer Policy change. whatwg/html#5783 has the corresponding change to HTML.
|
Still LGTM, but are there web platform tests for this specific change, i.e. for |
|
It looks like both |
|
Ah OK. Can we get some coverage then, before we merge this change? |
…licy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
This behavior is currently covered by a number of generated WPTs
(delivery type "meta" in the spec.src.json), but it doesn't cover a
handful of "legacy" keywords that the spec supports:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL adds test coverage for these keywords by adding new test cases
to referrer-policy/spec.src.json. It also incorporates a behavior change
proposed in a new spec pull request whatwg/html#5783,
which updates the "default" meta tag keyword to, instead of
being statically mapped to "no-referrer-when-downgrade" (which, until
recently, *was* the default policy), cross-reference the actual default
policy value. Finally, it removes a few now-redundant Blink web tests
covering the behavior the new WPTs verify.
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
…licy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
…licy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
…licy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org>
Reviewed-by: Jeremy Roman <jbroman@chromium.org>
Commit-Queue: David Van Cleve <davidvc@chromium.org>
Cr-Commit-Position: refs/heads/master@{#833114}
…licy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org>
Reviewed-by: Jeremy Roman <jbroman@chromium.org>
Commit-Queue: David Van Cleve <davidvc@chromium.org>
Cr-Commit-Position: refs/heads/master@{#833114}
…licy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org>
Reviewed-by: Jeremy Roman <jbroman@chromium.org>
Commit-Queue: David Van Cleve <davidvc@chromium.org>
Cr-Commit-Position: refs/heads/master@{#833114}
…> use the default referrer policy, a=testonly
Automatic update from web-platform-tests
Make <meta name=referrer content=default> use the default referrer policy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org>
Reviewed-by: Jeremy Roman <jbroman@chromium.org>
Commit-Queue: David Van Cleve <davidvc@chromium.org>
Cr-Commit-Position: refs/heads/master@{#833114}
--
wpt-commits: 260262e3293459fed0f73c430100706abdc32a45
wpt-pr: 26710
…> use the default referrer policy, a=testonly
Automatic update from web-platform-tests
Make <meta name=referrer content=default> use the default referrer policy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org>
Reviewed-by: Jeremy Roman <jbroman@chromium.org>
Commit-Queue: David Van Cleve <davidvc@chromium.org>
Cr-Commit-Position: refs/heads/master@{#833114}
--
wpt-commits: 260262e3293459fed0f73c430100706abdc32a45
wpt-pr: 26710
…> use the default referrer policy, a=testonly
Automatic update from web-platform-tests
Make <meta name=referrer content=default> use the default referrer policy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org>
Reviewed-by: Jeremy Roman <jbroman@chromium.org>
Commit-Queue: David Van Cleve <davidvc@chromium.org>
Cr-Commit-Position: refs/heads/master@{#833114}
--
wpt-commits: 260262e3293459fed0f73c430100706abdc32a45
wpt-pr: 26710
…> use the default referrer policy, a=testonly
Automatic update from web-platform-tests
Make <meta name=referrer content=default> use the default referrer policy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org>
Reviewed-by: Jeremy Roman <jbroman@chromium.org>
Commit-Queue: David Van Cleve <davidvc@chromium.org>
Cr-Commit-Position: refs/heads/master@{#833114}
--
wpt-commits: 260262e3293459fed0f73c430100706abdc32a45
wpt-pr: 26710
…> use the default referrer policy, a=testonly
Automatic update from web-platform-tests
Make <meta name=referrer content=default> use the default referrer policy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshigechromium.org>
Reviewed-by: Jeremy Roman <jbromanchromium.org>
Commit-Queue: David Van Cleve <davidvcchromium.org>
Cr-Commit-Position: refs/heads/master{#833114}
--
wpt-commits: 260262e3293459fed0f73c430100706abdc32a45
wpt-pr: 26710
UltraBlame original commit: 89d283f63157d10eb91f606a16cd1ec72302b99d
…> use the default referrer policy, a=testonly
Automatic update from web-platform-tests
Make <meta name=referrer content=default> use the default referrer policy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshigechromium.org>
Reviewed-by: Jeremy Roman <jbromanchromium.org>
Commit-Queue: David Van Cleve <davidvcchromium.org>
Cr-Commit-Position: refs/heads/master{#833114}
--
wpt-commits: 260262e3293459fed0f73c430100706abdc32a45
wpt-pr: 26710
UltraBlame original commit: 89d283f63157d10eb91f606a16cd1ec72302b99d
…> use the default referrer policy, a=testonly
Automatic update from web-platform-tests
Make <meta name=referrer content=default> use the default referrer policy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshigechromium.org>
Reviewed-by: Jeremy Roman <jbromanchromium.org>
Commit-Queue: David Van Cleve <davidvcchromium.org>
Cr-Commit-Position: refs/heads/master{#833114}
--
wpt-commits: 260262e3293459fed0f73c430100706abdc32a45
wpt-pr: 26710
UltraBlame original commit: 89d283f63157d10eb91f606a16cd1ec72302b99d
|
WPTs have been added in web-platform-tests/wpt/pull/26710 (thanks @davidvancleve !) |
|
Awesome, thanks! Merging now. |
…> use the default referrer policy, a=testonly
Automatic update from web-platform-tests
Make <meta name=referrer content=default> use the default referrer policy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org>
Reviewed-by: Jeremy Roman <jbroman@chromium.org>
Commit-Queue: David Van Cleve <davidvc@chromium.org>
Cr-Commit-Position: refs/heads/master@{#833114}
--
wpt-commits: 260262e3293459fed0f73c430100706abdc32a45
wpt-pr: 26710
…> use the default referrer policy, a=testonly
Automatic update from web-platform-tests
Make <meta name=referrer content=default> use the default referrer policy
The HTML meta tag allows one to set a document's referrer policy by
providing values to
<meta rel=referrer content={referrer policy here}>
In addition to all of the referrer policy identifiers (unsafe-url,
no-referrer-when-downgrade, etc), the HTML spec allows a few legacy
values for the "content" attribute:
"never" is treated as if it instead read "no-referrer",
"always" as "unsafe-url",
"origin-when-crossorigin" as "origin-when-cross-origin", and
"default" as "no-referrer-when-downgrade".
This CL incorporates a behavior change proposed in a new spec pull
request whatwg/html#5783, which updates the
"default" meta tag keyword to, instead of being statically mapped to
no-referrer-when-downgrade", cross-reference the actual default policy
value.
It also adds test coverage for all of the legacy keywords by adding new
test cases to wpt/referrer-policy/spec.src.json; the referrer policy
WPTs didn't previously cover this behavior.
Additionally, the CL removes a few now-redundant Blink web tests
covering the behavior that WPTs now verify.
This change is web-visible, but I think it's arguably covered by the
recently shipped change updating the default referrer policy from its
previous value of no-referrer-when-downgrade to a new value of
strict-origin-when-cross-origin. [1] At the time the <meta> behavior was
originally written into the spec, there wasn't an explicit single source
of truth for the "default referrer policy" per se: instead, specs
(Fetch, HTML, and the WebAppSec Referrer Policy spec) individually
defined fallback behavior in "no policy specified" cases by referring
specifically to the "no-referrer-when-downgrade" policy value.
[1]: https://groups.google.com/a/chromium.org/g/blink-dev/c/lqFuqwZDDR8/m/nKPRTc7DAQAJ
Fixed: 1154350
Change-Id: Ifb3bf9aa9f773c64af1a6e79f39511cf1c1bd8fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2567977
Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org>
Reviewed-by: Jeremy Roman <jbroman@chromium.org>
Commit-Queue: David Van Cleve <davidvc@chromium.org>
Cr-Commit-Position: refs/heads/master@{#833114}
--
wpt-commits: 260262e3293459fed0f73c430100706abdc32a45
wpt-pr: 26710
This is a companion to w3c/webappsec-referrer-policy/pull/142 which introduces a new
default referrer policyconstant in the referrer-policy spec. We should point the mapping of the legacydefaultreferrer policy specified via<meta>tags to the default value defined in that spec./infrastructure.html ( diff )
/semantics.html ( diff )