diff --git a/index.bs b/index.bs index 8d1cab56ce..687c4f1449 100644 --- a/index.bs +++ b/index.bs @@ -1120,7 +1120,7 @@ spec:SRI; urlPrefix: https://w3c.github.io/webappsec-subresource-integrity 1. Let |hash| be the [=concatenation=] of |algorithm|, U+2D (-), and |h|. 1. Let |global| be the |request|'s [=request/client=]'s [=/global object=]. 1. If |global| is not a {{Window}}, return. - 1. Let |stripped document URL| to be the result of executing [[#strip-url-for-use-in-reports]] + 1. Let |stripped document URL| to be the result of executing [=strip URL for use in reports=] on |global|'s [=associated document|document=]'s [=Document/URL=]. 1. If |policy|'s [=directive set=] does not contain a [=directive=] named "report-to", return. 1. Let |report-to directive| be a [=directive=] named "report-to" from |policy|'s [=directive @@ -1744,7 +1744,7 @@ Content-Type: application/reports+json 1. Assert: |resource| is a [=/URL=] or a [=string=]. - 2. If |resource| is a [=/URL=], return the result of executing [[#strip-url-for-use-in-reports]] on + 2. If |resource| is a [=/URL=], return the result of executing [=strip URL for use in reports=] on |resource|. 3. Return |resource|. @@ -1761,10 +1761,10 @@ Content-Type: application/reports+json follows: : "`document-uri`" - :: The result of executing [[#strip-url-for-use-in-reports]] on |violation|'s + :: The result of executing [=strip URL for use in reports=] on |violation|'s url. : "`referrer`" - :: The result of executing [[#strip-url-for-use-in-reports]] on |violation|'s + :: The result of executing [=strip URL for use in reports=] on |violation|'s referrer. : "`blocked-uri`" :: The result of executing [[#obtain-violation-blocked-uri]] on |violation|'s @@ -1793,7 +1793,7 @@ Content-Type: application/reports+json 2. If |violation|'s source file is not null: - 1. Set |body|["`source-file`'] to the result of executing [[#strip-url-for-use-in-reports]] + 1. Set |body|["`source-file`'] to the result of executing [=strip URL for use in reports=] on |violation|'s source file. 2. Set |body|["`line-number`"] to |violation|'s @@ -1808,21 +1808,6 @@ Content-Type: application/reports+json 4. Return the result of serialize an infra value to JSON bytes given «[ "csp-report" → body ]». -

Strip URL for use in reports

- Given a [=/URL=] |url|, this algorithm returns a string representing the URL for use in violation - reports: - - 1. If |url|'s scheme is not an HTTP(S) scheme, - then return |url|'s scheme. - - 2. Set |url|’s fragment to the empty string. - - 3. Set |url|’s username to the empty string. - - 4. Set |url|’s password to the empty string. - - 5. Return the result of executing the URL serializer on |url|. -

Report a |violation|

@@ -1865,10 +1850,10 @@ Content-Type: application/reports+json interface at |target| with its attributes initialized as follows: : {{SecurityPolicyViolationEvent/documentURI}} - :: The result of executing [[#strip-url-for-use-in-reports]] on |violation|'s + :: The result of executing [=strip URL for use in reports=] on |violation|'s url. : {{SecurityPolicyViolationEvent/referrer}} - :: The result of executing [[#strip-url-for-use-in-reports]] on |violation|'s + :: The result of executing [=strip URL for use in reports=] on |violation|'s referrer. : {{SecurityPolicyViolationEvent/blockedURI}} :: The result of executing [[#obtain-violation-blocked-uri]] on |violation|'s @@ -1883,7 +1868,7 @@ Content-Type: application/reports+json : {{SecurityPolicyViolationEvent/disposition}} :: |violation|'s disposition : {{SecurityPolicyViolationEvent/sourceFile}} - :: The result of executing [[#strip-url-for-use-in-reports]] on |violation|'s + :: The result of executing [=strip URL for use in reports=] on |violation|'s source file, if |violation|'s source file is not null, or null otherwise. : {{SecurityPolicyViolationEvent/statusCode}} @@ -1976,11 +1961,11 @@ Content-Type: application/reports+json follows: : {{CSPViolationReportBody/documentURL}} - :: The result of executing [[#strip-url-for-use-in-reports]] on |violation|'s + :: The result of executing [=strip URL for use in reports=] on |violation|'s url. : {{CSPViolationReportBody/referrer}} - :: The result of executing [[#strip-url-for-use-in-reports]] on |violation|'s + :: The result of executing [=strip URL for use in reports=] on |violation|'s referrer. : {{CSPViolationReportBody/blockedURL}} @@ -1995,7 +1980,7 @@ Content-Type: application/reports+json policy. : {{CSPViolationReportBody/sourceFile}} - :: The result of executing [[#strip-url-for-use-in-reports]] on |violation|'s + :: The result of executing [=strip URL for use in reports=] on |violation|'s source file, if |violation|'s source file is not null, or null otherwise.