inhji
/
Web-Environment-Integrity
1
0
Fork 0
Code Issues 69 Pull Requests 11 Packages Projects Releases Wiki Activity

Add requirement to only be enabled in secure context

This commit is contained in:
Rupert Ben Wiser 2023-06-19 14:46:59 +00:00 committed by Ben Wiser
parent b8a049e76e
commit 25aaa6524c
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/spec.bs
View File

@ -131,6 +131,11 @@ stores state in the [=Integrity verdict=] that can be used for cross site tracki
## Security considerations ## {#security}
### Secure context only ### {#security-secure-context}
Web environment integrity MUST only be enabled in a [=secure context=]. This is to ensure that the
website is not spoofed.
<i>Todo</i>
## Privacy considerations ## {#privacy}