Jeremy Roman

Blocking annotations by origin feels like CSP

2

Is there a reason this aspect of the problem shouldn't be solved with Content Security Policy, which already provides great ways of limiting the origins which can be used to...

How should prefetch be exposed?

7

We're working on navigational prefetch and think it would be useful for developers to, at a minimum, be able to tell whether the page was prefetched (so they can look...

Expose delivery type in PerformanceResourceTiming.

7

This is an attempt to address both w3c/navigation-timing#163 and #303 by exposing a `deliveryType` attribute on `PerformanceResourceTiming` (as mentioned in https://github.com/w3c/resource-timing/issues/303#issuecomment-1099078362), specifically the entry that may consume (rather than populate)...

Add missing parameters to 'Create the navigation timing entry'.

4

There are two missing parameters to [create the navigation timing entry](https://w3c.github.io/navigation-timing/#dfn-create-the-navigation-timing-entry), which were added in https://github.com/w3c/navigation-timing/commit/0b8d5849 and https://github.com/w3c/navigation-timing/commit/5e4bae47, respectively, but never added to the invocation site in HTML. This change...

Add delivery type to PerformanceResourceTiming.

8

Addresses #332. This defines a concept of "delivery type" which currently describes the difference between resources delivered from the HTTP cache and those not (currently only detectable via transferSize). It...

Cookie-Indices should specify how unexpected values are handled

1

(re. draft-nottingham-http-availability-hints) @mnot's suggestion via email was: * ignore unrecognized parameters * treat other unexpected data structures like a syntax error and ignore the field (i.e., falling back to vary)...

whatwg/urlpattern#199 adds a read-only `hasRegExpGroups` property. When/if it's merged, deno may wish to support it as well.

Constructor string parser has confusing result for paths containing a colon.

2

### What is the issue with the URL Pattern Standard? The colon is treated as defining a protocol, even in cases where the URL parser would not (because it looks...

i.e., you must write `https://alice\:[email protected]/`; failing to escape the colon leads to the username pattern being parsed as `alice:bob`. We should either change or document this.

Create a 'report an exception' algorithm per #958

1

This algorithm directly includes the error propagation and fallback behavior, and requires callers to supply the global scope to be used, rather than magically inferring it. Call sites within HTML...