diff --git a/index.bs b/index.bs index 7635361..559910c 100644 --- a/index.bs +++ b/index.bs @@ -189,12 +189,11 @@ The requestStorageAccessFor API defines a [=powerful feature=] identified by the
[=powerful feature/permission key generation algorithm=]
- To generate a new [=permission key=] for the "top-level-storage-access" feature, given an [=environment settings object=] |settings|, run the following steps: - 1. Let |current origin| be |settings|' [=environment settings object/origin=]. - 1. If |current origin| is not [=same site=] with |settings|' [=top-level origin=], return null. - 1. Return the result of [=obtain a site|obtaining a site=] from |settings|' [=top-level origin=]. + To generate a new [=permission key=] for the "top-level-storage-access" feature, given an [=/origin=] |origin| and [=/origin=] |embedded origin|, run the following steps: + 1. If |embedded origin| is not [=same site=] with |origin|, return null. + 1. Return the result of [=obtain a site|obtaining a site=] from |origin|. - Note: the check for whether |settings|' [=environment settings object/origin=] is [=same site=] with |settings|' [=top-level origin=] is intended to disallow permission queries from cross-site frames. + Note: the check for whether |embedded origin| is [=same site=] with |origin| is intended to disallow permission queries from cross-site frames. This depends on the invariant that `top-level-storage-access` permission requests are only allowed in a [=top-level browsing context=]. As such, this check is only relevant in {{Permissions/query(permissionDesc)}}.