Skip to content

Commit

Permalink
Allow user agents to consider usage of document.domain non-secure.
Browse files Browse the repository at this point in the history 
We can't require this behavior, as usage is far too high (and Facebook
requires it in their SDK. Grrrr.). User agents are encouraged to help
developers migrate away from this API, however, and can hopefully
enforce this optional requirement at some point in the future.

#10
  • Loading branch information
@mikewest
mikewest committed Dec 11, 2015
1 parent 64e8a14 commit 1bd4ef2
Show file tree
Hide file tree
Showing 2 changed files with 52 additions and 26 deletions.
37 changes: 26 additions & 11 deletions index.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1027,7 +1027,7 @@
<div class="head">
<p data-fill-with="logo"><a class="logo" href="http://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/Icons/w3c_home" width="72"> </a> </p>
<h1 class="p-name no-ref" id="title">Secure Contexts</h1>
<h2 class="no-num no-toc no-ref heading settled" id="subtitle"><span class="content">Editor’s Draft, <time class="dt-updated" datetime="2015-11-12">12 November 2015</time></span></h2>
<h2 class="no-num no-toc no-ref heading settled" id="subtitle"><span class="content">Editor’s Draft, <time class="dt-updated" datetime="2015-12-11">11 December 2015</time></span></h2>
<div data-fill-with="spec-metadata">
<dl>
<dt>This version:
Expand Down Expand Up @@ -1546,13 +1546,13 @@ <h2 class="heading settled" data-level="2" id="framework"><span class="secno">2.
<p>Likewise, a <a data-link-type="dfn" href="http://www.w3.org/TR/html5/webappapis.html#global-object">global object</a> is considered a <a data-link-type="dfn" href="#secure-context">secure context</a> if its <a data-link-type="dfn" href="http://www.w3.org/TR/html5/webappapis.html#relevant-settings-object-for-a-global-object">relevant settings object</a> is a <a data-link-type="dfn" href="#secure-context">secure context</a>.</p>
<h3 class="heading settled" data-level="2.1" id="monkey-patching"><span class="secno">2.1. </span><span class="content">Modifications to HTML</span><a class="self-link" href="#monkey-patching"></a></h3>
<h4 class="heading settled" data-level="2.1.1" id="monkey-patching-shared-workers"><span class="secno">2.1.1. </span><span class="content">Shared Workers</span><a class="self-link" href="#monkey-patching-shared-workers"></a></h4>
<p>The <code class="idl"><a data-link-type="idl" href="https://html.spec.whatwg.org/multipage/workers.html#dom-sharedworker">SharedWorker()</a></code> constructor will throw a <code>SecurtyError</code> exception if
<p>The <code class="idl"><a data-link-type="idl" href="http://www.w3.org/TR/workers/#dom-sharedworker">SharedWorker()</a></code> constructor will throw a <code>SecurtyError</code> exception if
a <a data-link-type="dfn" href="#secure-context">secure context</a> attempts to attach to an Worker which is not a <a data-link-type="dfn" href="#secure-context">secure context</a>, and if a non-secure context attempts to attach to a
Worker which is a <a data-link-type="dfn" href="#secure-context">secure context</a>. The constructor is modified as
follows:</p>
<ol>
<li data-md="">
<p>As the first substep of the <code class="idl"><a data-link-type="idl" href="https://html.spec.whatwg.org/multipage/workers.html#dom-sharedworker">SharedWorker()</a></code> constructor’s current step
<p>As the first substep of the <code class="idl"><a data-link-type="idl" href="http://www.w3.org/TR/workers/#dom-sharedworker">SharedWorker()</a></code> constructor’s current step
7.7 ("If <var>worker global scope</var> is not <code>null</code>, then run these
steps:"), run the following step:</p>
<ol>
Expand All @@ -1572,11 +1572,11 @@ <h4 class="heading settled" data-level="2.1.2" id="monkey-patching-global-object
readonly attribute boolean <dfn class="idl-code" data-dfn-for="Window" data-dfn-type="attribute" data-export="" data-readonly="" data-type="boolean " id="dom-window-issecurecontext">isSecureContext<a class="self-link" href="#dom-window-issecurecontext"></a></dfn>;
};

partial interface <a class="idl-code" data-link-type="interface" href="https://html.spec.whatwg.org/multipage/workers.html#workerglobalscope">WorkerGlobalScope</a> {
partial interface <a class="idl-code" data-link-type="interface" href="http://www.w3.org/TR/workers/#workerglobalscope">WorkerGlobalScope</a> {
readonly attribute boolean <dfn class="idl-code" data-dfn-for="WorkerGlobalScope" data-dfn-type="attribute" data-export="" data-readonly="" data-type="boolean " id="dom-workerglobalscope-issecurecontext">isSecureContext<a class="self-link" href="#dom-workerglobalscope-issecurecontext"></a></dfn>;
};
</pre>
<p>Both <code class="idl"><a data-link-type="idl" href="http://www.w3.org/TR/dom/#interface-window">Window</a></code>'s <code class="idl"><a data-link-type="idl" href="#dom-window-issecurecontext">isSecureContext</a></code> and <code class="idl"><a data-link-type="idl" href="https://html.spec.whatwg.org/multipage/workers.html#workerglobalscope">WorkerGlobalScope</a></code>'s <code class="idl"><a data-link-type="idl" href="#dom-workerglobalscope-issecurecontext">isSecureContext</a></code> attributes' getters return <code>true</code> if the <a data-link-type="dfn" href="http://www.w3.org/TR/html5/webappapis.html#relevant-settings-object-for-a-global-object">relevant settings object</a> for the getter’s <a data-link-type="dfn" href="http://www.w3.org/TR/html5/webappapis.html#global-object">global object</a> is a <a data-link-type="dfn" href="#secure-context">secure context</a>, and <code>false</code> otherwise.</p>
<p>Both <code class="idl"><a data-link-type="idl" href="http://www.w3.org/TR/dom/#interface-window">Window</a></code>'s <code class="idl"><a data-link-type="idl" href="#dom-window-issecurecontext">isSecureContext</a></code> and <code class="idl"><a data-link-type="idl" href="http://www.w3.org/TR/workers/#workerglobalscope">WorkerGlobalScope</a></code>'s <code class="idl"><a data-link-type="idl" href="#dom-workerglobalscope-issecurecontext">isSecureContext</a></code> attributes' getters return <code>true</code> if the <a data-link-type="dfn" href="http://www.w3.org/TR/html5/webappapis.html#relevant-settings-object-for-a-global-object">relevant settings object</a> for the getter’s <a data-link-type="dfn" href="http://www.w3.org/TR/html5/webappapis.html#global-object">global object</a> is a <a data-link-type="dfn" href="#secure-context">secure context</a>, and <code>false</code> otherwise.</p>
</section>
<section>
<h2 class="heading settled" data-level="3" id="algorithms"><span class="secno">3. </span><span class="content">Algorithms</span><a class="self-link" href="#algorithms"></a></h2>
Expand All @@ -1588,13 +1588,13 @@ <h3 class="heading settled" data-level="3.1" id="settings-object"><span class="s
<li data-md="">
<p>Let <var>ancestors</var> be an empty list.</p>
<li data-md="">
<p>If <var>settings object</var>’s <a data-link-type="dfn" href="http://www.w3.org/TR/html5/webappapis.html#global-object">global object</a> is a <code class="idl"><a data-link-type="idl" href="https://html.spec.whatwg.org/multipage/workers.html#workerglobalscope">WorkerGlobalScope</a></code>, then:</p>
<p>If <var>settings object</var>’s <a data-link-type="dfn" href="http://www.w3.org/TR/html5/webappapis.html#global-object">global object</a> is a <code class="idl"><a data-link-type="idl" href="http://www.w3.org/TR/workers/#workerglobalscope">WorkerGlobalScope</a></code>, then:</p>
<ol>
<li data-md="">
<p>Add <var>settings object</var> to <var>ancestors</var>.</p>
<li data-md="">
<p>For each <code class="idl"><a data-link-type="idl" href="http://www.w3.org/TR/dom/#interface-document">Document</a></code> (<var>document</var>) in <var>settings object</var>’s <a data-link-type="dfn" href="http://www.w3.org/TR/html5/webappapis.html#global-object">global
object</a>’s list of <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/workers.html#the-workers-documents">the worker’s <code>Documents</code></a>:</p>
object</a>’s list of <a data-link-type="dfn" href="http://www.w3.org/TR/workers/#the-workers-documents">the worker’s <code>Documents</code></a>:</p>
<ol>
<li data-md="">
<p>Add each item in the result of executing <a href="#gather-ancestors">§3.3 Gather document’s relevant ancestors</a> on <var>document</var> to <var>ancestors</var>.</p>
Expand All @@ -1609,6 +1609,13 @@ <h3 class="heading settled" data-level="3.1" id="settings-object"><span class="s
<li data-md="">
<p>For each <var>ancestor settings object</var> in <var>ancestors</var>:</p>
<ol>
<li data-md="">
<p>The user agent MAY return "<code>Not Secure</code>" if <var>ancestor settings
object</var>’s <a data-link-type="dfn" href="http://www.w3.org/TR/html5/browsers.html#effective-script-origin">effective script origin</a> is <em>not</em> an <a data-link-type="dfn" href="http://www.w3.org/TR/html5/browsers.html#concept-origin-alias">alias</a> to its <a data-link-type="dfn" href="http://www.w3.org/TR/html5/browsers.html#origin">origin</a>.</p>
<p class="note" role="note">Note: This allows user agents the option of treating documents as
non-secure contexts if they relax same-origin restrictions via <code>{{document.domain}}</code>. This feature’s usage is widespread enough to
make it difficult for this behavior to be a requirement, but user
agents are encouraged to migrate to this behavior over time.</p>
<li data-md="">
<p>If <var>ancestor settings object</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#https-state">HTTPS state</a> is "<code>modern</code>", skip
to the next <var>ancestor settings object</var>.</p>
Expand Down Expand Up @@ -1978,21 +1985,20 @@ <h3 class="no-num heading settled" id="index-defined-elsewhere"><span class="con
<li>
<a data-link-type="biblio" href="#biblio-html">[HTML]</a> defines the following terms:
<ul>
<li><a href="https://html.spec.whatwg.org/multipage/workers.html#dom-sharedworker">SharedWorker()</a>
<li><a href="https://html.spec.whatwg.org/multipage/workers.html#workerglobalscope">WorkerGlobalScope</a>
<li><a href="https://html.spec.whatwg.org/multipage/webappapis.html#creation-url">creation url</a>
<li><a href="https://html.spec.whatwg.org/multipage/webappapis.html#https-state">https state</a>
<li><a href="https://html.spec.whatwg.org/multipage/semantics.html#link-type-noopener">noopener</a>
<li><a href="https://html.spec.whatwg.org/multipage/workers.html#the-workers-documents">the worker's documents</a>
</ul>
<li>
<a data-link-type="biblio" href="#biblio-html5">[html5]</a> defines the following terms:
<ul>
<li><a href="http://www.w3.org/TR/html5/browsers.html#concept-origin-alias">alias</a>
<li><a href="http://www.w3.org/TR/html5/embedded-content-0.html#an-iframe-srcdoc-document">an iframe srcdoc document</a>
<li><a href="http://www.w3.org/TR/html5/browsers.html#ancestor-browsing-context">ancestor browsing context</a>
<li><a href="http://www.w3.org/TR/html5/browsers.html#auxiliary-browsing-context">auxiliary browsing context</a>
<li><a href="http://www.w3.org/TR/html5/browsers.html#browsing-context">browsing context</a>
<li><a href="http://www.w3.org/TR/html5/browsers.html#creator-document">creator document</a>
<li><a href="http://www.w3.org/TR/html5/browsers.html#effective-script-origin">effective script origin</a>
<li><a href="http://www.w3.org/TR/html5/webappapis.html#global-object">global object</a>
<li><a href="http://www.w3.org/TR/html5/webappapis.html#incumbent-settings-object">incumbent settings object</a>
<li><a href="http://www.w3.org/TR/html5/browsers.html#origin">opaque identifier</a>
Expand Down Expand Up @@ -2020,6 +2026,13 @@ <h3 class="no-num heading settled" id="index-defined-elsewhere"><span class="con
<ul>
<li><a href="http://www.w3.org/2014/Process-20140801/#rec-modify">modify a specification</a>
</ul>
<li>
<a data-link-type="biblio" href="#biblio-workers">[workers]</a> defines the following terms:
<ul>
<li><a href="http://www.w3.org/TR/workers/#dom-sharedworker">SharedWorker()</a>
<li><a href="http://www.w3.org/TR/workers/#workerglobalscope">WorkerGlobalScope</a>
<li><a href="http://www.w3.org/TR/workers/#the-workers-documents">the worker's documents</a>
</ul>
<li>
<a data-link-type="biblio" href="#biblio-html">[HTML]</a> defines the following terms:
<ul>
Expand Down Expand Up @@ -2051,6 +2064,8 @@ <h3 class="no-num heading settled" id="normative"><span class="content">Normativ
<dd>S. Cheshire; M. Krochmal. <a href="https://tools.ietf.org/html/rfc6761">Special-Use Domain Names</a>. February 2013. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc6761">https://tools.ietf.org/html/rfc6761</a>
<dt id="biblio-url"><a class="self-link" href="#biblio-url"></a>[URL]
<dd>Anne van Kesteren; Sam Ruby. <a href="http://www.w3.org/TR/url-1/">URL</a>. 9 December 2014. WD. URL: <a href="http://www.w3.org/TR/url-1/">http://www.w3.org/TR/url-1/</a>
<dt id="biblio-workers"><a class="self-link" href="#biblio-workers"></a>[WORKERS]
<dd>Ian Hickson. <a href="http://www.w3.org/TR/workers/">Web Workers</a>. 24 September 2015. WD. URL: <a href="http://www.w3.org/TR/workers/">http://www.w3.org/TR/workers/</a>
</dl>
<h3 class="no-num heading settled" id="informative"><span class="content">Informative References</span><a class="self-link" href="#informative"></a></h3>
<dl>
Expand Down Expand Up @@ -2088,7 +2103,7 @@ <h2 class="no-num heading settled" id="idl-index"><span class="content">IDL Inde
readonly attribute boolean <a data-readonly="" data-type="boolean " href="#dom-window-issecurecontext">isSecureContext</a>;
};

partial interface <a class="idl-code" data-link-type="interface" href="https://html.spec.whatwg.org/multipage/workers.html#workerglobalscope">WorkerGlobalScope</a> {
partial interface <a class="idl-code" data-link-type="interface" href="http://www.w3.org/TR/workers/#workerglobalscope">WorkerGlobalScope</a> {
readonly attribute boolean <a data-readonly="" data-type="boolean " href="#dom-workerglobalscope-issecurecontext">isSecureContext</a>;
};

Expand Down
41 changes: 26 additions & 15 deletions index.src.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -39,12 +39,14 @@ <h1>Secure Contexts</h1>
text: an iframe srcdoc document
urlPrefix: browsers.html
text: active document
text: alias; url: concept-origin-alias
text: ancestor browsing context
text: auxiliary browsing context
text: browsing context
text: browsing context container
text: creating a new Document object
text: creator Document
text: effective script origin
text: nested browsing context
text: sandboxed origin browsing context flag
text: sandboxing flag set
Expand Down Expand Up @@ -79,24 +81,23 @@ <h1>Secure Contexts</h1>
text: scheme; for: URL; url: concept-url-scheme
type: interface
text: URL
spec: WORKERS; urlPrefix: http://www.w3.org/TR/workers/
type: dfn
text: the worker's documents
text: set up a worker environment settings object
type: interface
text: SharedWorker
text: Worker
text: WorkerGlobalScope
type: constructor
text: SharedWorker(); url: dom-sharedworker
urlPrefix: https://html.spec.whatwg.org/multipage/; spec: HTML
type: dfn
urlPrefix: semantics.html
text: noopener; url: link-type-noopener
urlPrefix: workers.html
text: the worker's documents
text: set up a worker environment settings object
urlPrefix: webappapis.html
text: creation URL
text: HTTPS state
type: constructor
urlPrefix: workers.html
text: SharedWorker(); url: dom-sharedworker
type: interface
urlPrefix: workers.html
text: WorkerGlobalScope
text: Worker
text: SharedWorker
</pre>
<pre class="biblio">
{
Expand Down Expand Up @@ -689,7 +690,17 @@ <h3 id="settings-object">

4. For each |ancestor settings object| in |ancestors|:

1. If |ancestor settings object|'s <a>HTTPS state</a> is "`modern`", skip
1. The user agent MAY return "`Not Secure`" if |ancestor settings
object|'s <a>effective script origin</a> is <em>not</em> an
<a>alias</a> to its <a>origin</a>.

Note: This allows user agents the option of treating documents as
non-secure contexts if they relax same-origin restrictions via
`{{document.domain}}`. This feature's usage is widespread enough to
make it difficult for this behavior to be a requirement, but user
agents are encouraged to migrate to this behavior over time.

2. If |ancestor settings object|'s <a>HTTPS state</a> is "`modern`", skip
to the next |ancestor settings object|.

<div class="note">
Expand All @@ -705,9 +716,9 @@ <h3 id="settings-object">
`http://127.0.0.1/`.
</div>

2. Let |origin| be |ancestor settings object|'s <a>origin</a>.
3. Let |origin| be |ancestor settings object|'s <a>origin</a>.

3. If |origin| is an <a>opaque identifier</a>, set |origin| to the
4. If |origin| is an <a>opaque identifier</a>, set |origin| to the
<a lt="origin of a url">origin</a> of |settings object|'s <a>creation
URL</a>.

Expand All @@ -716,7 +727,7 @@ <h3 id="settings-object">
context's capabilities, and therefore to the risk it poses). This
covers scenarios such as `<iframe sandbox src="http://localhost/">`.

4. If the result of executing the [[#is-origin-trustworthy]] algorithm
5. If the result of executing the [[#is-origin-trustworthy]] algorithm
on |origin| is <strong>not</strong> `Potentially
Trustworthy`, then return "`Not Secure`".

Expand Down

0 comments on commit 1bd4ef2

Please sign in to comment.