CSP: Embedded Enforcement

Hello, public-webappsec!

I've just published a new working draft of CSP: Embedded Enforcement (
https://w3c.github.io/webappsec-csp/embedded/), which aims to align the
feature's definition with recent changes to both the CSP3 and HTML
specifications. It would be helpful if y'all would take a look at the
current state of the document and provide feedback on it's sanity (either
here, or via GitHub issues <https://github.com/w3c/webappsec-csp/issues>).

An intern on my team will probably be starting an experimental
implementation in Chrome just before TPAC to see how the concepts in that
document shake out, so it's a great time to weigh in with opinions and
suggestions. :)

-mike