Re: [w3c/manifest] Which CSP policy should apply to images inside an app manifest? (#851)

I agree with @hofman-stripe . Could we generalize "owner Document" to "owner resource"? The payments use case doesn't have a document. However, there is a resource (i.e. the URL that returns a `link: <https://ph.example/payment_method_manifest.json>; rel="payment-method-manifest"` header) that clearly "owns" the subsequent manifest fetches.



-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/851#issuecomment-610052661