Thank you; that helps a lot! On Thu, Mar 7, 2024 at 1:34 AM Yifan Luo <[email protected]> wrote:
> I updated the name to "Content Security Policy for PNA permission prompt". > > Intent to Prototype: Content Security Policy for PNA permission prompt > > Contact [email protected] > > Explainer > https://github.com/WICG/private-network-access/blob/main/permission_prompt/explariner_content_security_policy.md > > Specificationhttps://wicg.github.io/private-network-access > > Summary > > A new Content Security Policy `private-address-space` and > `local-address-space` to let all documents declare their IP address space > ahead of time. > > > Blink componentBlink>SecurityFeature>CORS>PrivateNetworkAccess > <https://bugs.chromium.org/p/chromium/issues/list?q=component:Blink%3ESecurityFeature%3ECORS%3EPrivateNetworkAccess> > > Motivation > > To enhance private network security, we need a solution that extends > beyond the current fetch-focused Private Network Access permission. > > > Initial public proposal > https://docs.google.com/document/d/1YjcxNnrnp0BZb1suZI7mXbyjK1wM2M36aPkkbNRN3JY/edit?resourcekey=0-7DoGGwNK5d8n75paVuSFHg > > TAG reviewNone > > TAG review statusPending > > Risks > > > Interoperability and Compatibility > > None > > > *Gecko*: Positive ( > https://github.com/mozilla/standards-positions/issues/143) > > *WebKit*: Positive ( > https://github.com/WebKit/standards-positions/issues/163) > > *Web developers*: Positive > > *Other signals*: > > WebView application risks > > Does this intent deprecate or change behavior of existing APIs, such that > it has potentially high risk for Android WebView-based applications? > > None > > > Debuggability > > None > > > Is this feature fully tested by web-platform-tests > <https://chromium.googlesource.com/chromium/src/+/main/docs/testing/web_platform_tests.md> > ?No > > Flag name on chrome://flagsNone > > Finch feature nameNone > > Non-finch justificationNone > > Requires code in //chrome?False > > Tracking bughttps://g-issues.chromium.org/issues/327602976 > > Estimated milestones > > No milestones specified > > > Link to entry on the Chrome Platform Status > https://chromestatus.com/feature/5112291503898624 > > Links to previous Intent discussionsIntent to prototype: > https://groups.google.com/a/chromium.org/g/blink-dev/c/bz97-foS2Lo > > This intent message was generated by Chrome Platform Status > <https://chromestatus.com/>. > > On Monday, March 4, 2024 at 11:22:06 AM UTC+1 Yifan Luo wrote: > >> Maybe I need a better naming. The original PNA permission prompt requires >> developers to manually add a new fetch option "targetAddressSpace". So for >> the non-fetch requests, e.g. iframes, image elements, etc., we attempt to >> let websites to claim the targetAddressSpace in an earlier stage, which is >> as a new content security policy. >> >> On Monday, March 4, 2024 at 5:37:18 AM UTC+1 [email protected] wrote: >> >>> It's not clear what this intent or explainer means by "non-fetch >>> requests". https://github.com/WICG/private-network-access/issues/129 >>> >>> On Fri, Mar 1, 2024 at 12:52 AM 'Yifan Luo' via blink-dev < >>> [email protected]> wrote: >>> >>>> Contact [email protected] >>>> >>>> Explainer >>>> https://github.com/WICG/private-network-access/blob/main/permission_prompt/explariner_non-fetch_requests.md >>>> >>>> Specificationhttps://wicg.github.io/private-network-access >>>> >>>> Summary >>>> >>>> A new Content Security Policy `private-address-space` and >>>> `local-address-space` to let all documents declare their IP address space >>>> ahead of time. >>>> >>>> >>>> Blink componentBlink>SecurityFeature>CORS>PrivateNetworkAccess >>>> <https://bugs.chromium.org/p/chromium/issues/list?q=component:Blink%3ESecurityFeature%3ECORS%3EPrivateNetworkAccess> >>>> >>>> Motivation >>>> >>>> To enhance private network security, we need a solution that extends >>>> beyond the current fetch-focused Private Network Access permission. >>>> >>>> >>>> Initial public proposal >>>> https://docs.google.com/document/d/1YjcxNnrnp0BZb1suZI7mXbyjK1wM2M36aPkkbNRN3JY/edit?resourcekey=0-7DoGGwNK5d8n75paVuSFHg >>>> >>>> TAG reviewNone >>>> >>>> TAG review statusPending >>>> >>>> Risks >>>> >>>> >>>> Interoperability and Compatibility >>>> >>>> None >>>> >>>> >>>> *Gecko*: Positive ( >>>> https://github.com/mozilla/standards-positions/issues/143) >>>> >>>> *WebKit*: Positive ( >>>> https://github.com/WebKit/standards-positions/issues/163) >>>> >>>> *Web developers*: Positive >>>> >>>> *Other signals*: >>>> >>>> WebView application risks >>>> >>>> Does this intent deprecate or change behavior of existing APIs, such >>>> that it has potentially high risk for Android WebView-based applications? >>>> >>>> None >>>> >>>> >>>> Debuggability >>>> >>>> None >>>> >>>> >>>> Is this feature fully tested by web-platform-tests >>>> <https://chromium.googlesource.com/chromium/src/+/main/docs/testing/web_platform_tests.md> >>>> ?No >>>> >>>> Flag name on chrome://flagsNone >>>> >>>> Finch feature nameNone >>>> >>>> Non-finch justificationNone >>>> >>>> Requires code in //chrome?False >>>> >>>> Tracking bughttps://g-issues.chromium.org/issues/327602976 >>>> >>>> Estimated milestones >>>> >>>> No milestones specified >>>> >>>> >>>> Link to entry on the Chrome Platform Status >>>> https://chromestatus.com/feature/5112291503898624 >>>> >>>> This intent message was generated by Chrome Platform Status >>>> <https://chromestatus.com/>. >>>> >>>> -- >>>> Yifan >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "blink-dev" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAG-zKU_JsZW4MwABUgzpARnwFfmjXmYcGswNibWCWALejeRpyA%40mail.gmail.com >>>> <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAG-zKU_JsZW4MwABUgzpARnwFfmjXmYcGswNibWCWALejeRpyA%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>> -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAM0wra-tMHYF-nXS%2Bo_rtXrAQSbW7qWN9AzOM_ToFYncBE6-bw%40mail.gmail.com.
