Add Speculation Rules security and privacy considerations, and refactor into two bikeshed files #78
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…y and privacy considerations separate from prerendering.
jeremyroman
changed the title
|
The split looks solid. I'll try to review the S&P additions on Tuesday. I guess we should delete |
|
That's unfortunate. I guess we could still mark one of the files as supporting it, but ideally tobie/pr-preview#18 would be fixed. :) |
domenic
approved these changes
Sep 7, 2021
|
|
||
| Since existing [=credentials=] for the destination origin are not sent (assuming it is not [=same origin=] with the referrer), that site is limited in its ability to identify the user before navigation in a similar way to if the referrer site had simply used [[FETCH]] to make an uncredentialed request. Upon navigation, this becomes similar to ordinary navigation (e.g., by clicking a link that was not prefetched). | ||
|
|
||
| To the extent that user agents attempt to mitigate identity joining for ordinary fetches and navigations, they can apply similar mitigations to prefetched navigations. |
There was a problem hiding this comment.
I think @jyasskin might have a document you could link to on this subject.
Co-authored-by: Domenic Denicola <d@domenic.me>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This change:
index.bsis moved toprerendering.bs, which is unmodified except for making the speculation rules section just an outbound linkspeculation-rules.bshas a new abstract and security and privacy considerations, but is otherwise copied fromindex.bsMakefileis modified to support thisindex.htmlis created to bounce people to one of the two output files