diff --git a/source b/source index cd13f05e373..be8d099d8e6 100644 --- a/source +++ b/source @@ -4605,9 +4605,6 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute data-x="">cross-origin-isolated", which has a default allowlist of 'self'. -
  • "document-domain", which - has a default allowlist of *.
  • @@ -81174,9 +81171,8 @@ dictionary DragEventInit : MouseEventInit { of a domain to synchronously access each other's DOMs.

    In sandboxed iframes, Documents with opaque origins, Documents without a browsing context, and when the "document-domain" feature is disabled, the setter will + data-x="concept-origin-opaque">opaque origins, and Documents without a browsing context, the setter will throw a "SecurityError" exception. In cases where crossOriginIsolated or originAgentCluster return true, the setter will do @@ -81226,10 +81222,6 @@ dictionary DragEventInit : MouseEventInit { document.domain browsing context flag set, then throw a "SecurityError" DOMException.

    -
  • If this is not allowed to use the "document-domain" feature, then throw a - "SecurityError" DOMException.

  • -
  • Let effectiveDomain be this's origin's effective domain. @@ -131824,6 +131816,7 @@ INSERT INTERFACES HERE Daniel Steinberg, Daniel Tan, Daniel Trebbien, + Daniel Vogelheim, Danny Sullivan, Daphne Preston-Kendal, Darien Maillet Valentine,