[css-houdini-drafts] Pull Request: [worklets] Fill in privacy and security sections of worklets.

bfgeek has just submitted a new pull request for https://github.com/w3c/css-houdini-drafts:

== [worklets] Fill in privacy and security sections of worklets. ==
Fixes #92. (better late than never? ;)

Broadly speaking worklets should be allowed in non-secure contexts as
downstream specs may want to use them there.

CSP wise this should work the same as workers, using the "child-src"
directive. I've filed issue #378 to allow each downstream spec to use a
unique destination, e.g. "paintworklet", "audioworklet", etc.

The CSP spec should probably be extended to have a "worklet-src"
directive (as there is now a "worker-src" directive now?).

See https://github.com/w3c/css-houdini-drafts/pull/379

Received on Friday, 7 April 2017 18:20:36 UTC