diff --git a/xhr.bs b/xhr.bs index b96846a..13c320e 100644 --- a/xhr.bs +++ b/xhr.bs @@ -12,8 +12,32 @@ Translate IDs: enumdef-xmlhttprequestresponsetype xmlhttprequestresponsetype,dic
 urlPrefix: https://w3c.github.io/DOM-Parsing/; spec: dom-parsing
     type: dfn; text: fragment serializing algorithm; url: dfn-fragment-serializing-algorithm
+spec: DOCUMENT-POLICY; urlPrefix: https://w3c.github.io/webappsec-permissions-policy/document-policy.html
+    type: dfn
+        text: get policy value
+        text: configuration point
+        for: configuration point; urlPrefix: #configuration-point-
+            text: name
+            text: default value
+            text: type
 
+
+  {
+    "DOCUMENT-POLICY": {
+      "authors": [
+        "Ian Clelland"
+      ],
+      "href": "https://w3c.github.io/webappsec-permissions-policy/document-policy.html",
+      "title": "Document Policy",
+      "status": "ED",
+      "publisher": "W3C",
+      "deliveredBy": [
+        "https://www.w3.org/2011/webappsec/"
+      ]
+    }
+  }
+

Introduction

@@ -102,13 +126,13 @@ archives:

This specification depends on the Infra Standard. [[!INFRA]] -

This specification uses terminology from DOM, DOM Parsing and Serialization, Encoding, -Feature Policy, Fetch, File API, HTML, URL, Web IDL, and XML. +

This specification uses terminology from Document Policy, DOM, DOM Parsing and Serialization, +Encoding, Fetch, File API, HTML, URL, Web IDL, and XML. +[[!DOCUMENT-POLICY]] [[!DOM]] [[!DOM-PARSING]] [[!ENCODING]] -[[!FEATURE-POLICY]] [[!FETCH]] [[!FILEAPI]] [[!HTML]] @@ -926,9 +950,10 @@ return this's cross-origin credentials.

Otherwise, if this's synchronous flag is set:

    -
  1. If this's relevant settings object has a responsible document which - is not allowed to use the "sync-xhr" feature, then run - handle response end-of-body for this and a network error, and then return. +

  2. If this's relevant settings object has a responsible document for + which the policy value for "sync-xhr" is false, + then run handle response end-of-body for this and a network error, and then + return.

  3. Let response be the result of @@ -1596,11 +1621,16 @@ steps are: -

    Feature Policy integration

    +

    Document Policy integration

    -

    This specification defines a policy-controlled feature identified by the string -"sync-xhr". Its default allowlist is *. +

    This specification defines a configuration point whose name is "sync-xhr". Its type is +boolean, and and its default value is +false. +

    This section used to define an integration with Feature Policy. That integration +has been deprecated in favor of Document Policy, which allows independent control of synchronous +XHR in frames.

    Interface {{FormData}}