diff --git a/csp-specification.dev.html b/csp-specification.dev.html
--- a/csp-specification.dev.html
+++ b/csp-specification.dev.html
@@ -1419,16 +1419,43 @@ directive-value   = source-list
         <p>Whenever the user agent would load a plugin without an associated
         URI (e.g., because the <code>object</code> element lacked a
         <code>data</code> attribute), if the protected resource's URI does not
         <a href="#matches-a-source-list">match</a> the
         <a href="#dfn-allowed-object-sources">allowed object sources</a>, the
         user agent MUST NOT load the plugin.</p>
       </section>
       <section>
+        <h4><code>policy-uri</code></h4>
+
+        <p>The <code>policy-uri</code> directive specifies a URI from which
+        the user agent loads a CSP policy. The syntax for the name and value
+        of the directive are described by the following ABNF grammar:</p>
+
+<pre>
+directive-name    = "policy-uri"
+directive-value   = uri-reference
+uri-reference     = &lt;URI-reference from RFC 3986&gt;
+</pre>
+
+        <p>The value of the <code>policy-uri</code> directive is resolved
+        relative to the protected resource's URI and MUST resolve to the
+        same origin as the protected resource. The user agent MUST NOT
+        follow redirects when <a href= 
+        "http://www.w3.org/TR/html5/infrastructure.html#fetching-resources">
+        fetching</a> a CSP policy. If the policy is not served with a
+        <code>Content-Type</code> header of <code>application/content-security-policy</code>
+        the user agent MUST ignore it and report an error.</p>
+
+        <p>The fetched policy is treated as if it were the value of an
+        additional header of the same type (that is, enforced or monitored)
+        as that which included the <code>policy-uri</code> directive.</p>
+
+      </section>
+      <section>
         <h4><code>report-uri</code></h4>
 
         <p>The <code>report-uri</code> directive specifies a URI to which the
         user agent sends reports about policy violation. The syntax for the
         name and value of the directive are described by the following ABNF
         grammar:</p>
 
 <pre>