GitHub repository: w3c/webappsec-permissions-policy

Issues:
issue_544: state: open
title: Permissions Policy "deferred-fetch"
user: mingyc
issue_543: state: open
title: [clipboard] document.execCommand('copy') and presumably paste bypass permissions policy
user: williewillus
issue_542: state: open
title: Query: Can trusted subframe allocate permission to one of it's  cross-domain subframe
user: aromalanil
issue_537: state: open
title: Send reports for Permissions Policy violations in iframe to parent frame's endpoint
user: shhnjk
issue_533: state: open
title: A request's "window" is never a Window
user: jyasskin
issue_532: state: open
title: Set declared policy for powerful features to self by default
user: shhnjk
issue_531: state: open
title: Add "mediasession" to the list of permission policies
user: youennf
issue_527: state: open
title: Inconsistency in text and parsing algorithm (invalid member value)
user: JannisBush
issue_515: state: open
title: add none as an allowed default
user: fergald
issue_513: state: open
title: allow disabled-by-default features
user: fergald
issue_510: state: open
title: Clarify the expected usage of "Should request be allowed to use feature?"
user: xyaoinum
issue_502: state: open
title: Clarify "Shipped in Chrome" for picture-in-picture in features.md
user: XSpielinbox
issue_499: state: open
title: Update "Is feature enabled in document for origin?" behavior
user: xyaoinum
issue_496: state: open
title: Add smart-card
user: dandrader
issue_490: state: open
title: Update web-platform-tests
user: annevk
issue_488: state: open
title: Propose identity-credential-get permission policy
user: pkotwicz
issue_483: state: open
title: Deny all like alias for the Permission-Policy: Header
user: ecki
issue_481: state: open
title: Proposal: allow grouping permissions by year
user: Seirdy
issue_480: state: open
title: Denying self while still allowing subframes
user: fergald
issue_478: state: open
title: Mark "ambient-light-sensor" as behind a flag in features.md
user: o3-steven
issue_475: state: open
title: A "no-op" policy to support feature-agnostic testing
user: mustaqahmed
issue_472: state: open
title: Add PermissionsPolicyViolationReportBody toJSON operation
user: antosart
issue_469: state: open
title: PermissionsPolicyViolationReportBody is missing a toJSON operation
user: foolip
issue_444: state: open
title: Permissions Policy unload
user: fergald
issue_443: state: open
title: add "otp-credentials" policy-controlled feature token to features.md
user: equalsJeffH
issue_442: state: open
title: linkably define term "policy-controlled feature token"
user: equalsJeffH
issue_439: state: open
title: Incorret grammar in Container policies green box
user: BrainCrumbz
issue_435: state: open
title: explain 'none' more fully
user: equalsJeffH
issue_434: state: open
title: incorrect grammar: "and in and HTML attributes"
user: equalsJeffH
issue_432: state: open
title: [HEADER-STRUCTURE] reference needs updating
user: equalsJeffH
issue_431: state: open
title: Default allowlists only effect child browsing contexts
user: reillyeon
issue_430: state: open
title: Re-add Feature-Policy header as an alias?
user: gsnedders
issue_426: state: open
title: Provide example permission policy control via JS Element.setAttribute()
user: michaelwasserman
issue_419: state: open
title: Replace references to the "sync-xhr" policy-controlled feature
user: sideshowbarker
issue_410: state: open
title: Proposal: Transition 'sync-xhr' feature to Document Policy
user: clelland
issue_406: state: open
title: Make policy scope clear and address tracking risks in the privacy section
user: johnwilander
issue_401: state: open
title: Permissions Policy JS API
user: clelland
issue_396: state: open
title: Provide guidance on what to throw?
user: marcoscaceres
issue_390: state: open
title: Update "creating a feature policy" to use embedder
user: domenic
issue_381: state: open
title: Remove '*' default allowlist
user: annevk
issue_374: state: open
title: Policies in data: urls
user: clelland
issue_366: state: open
title: Feature registry
user: clelland
issue_358: state: open
title: Fix navigation race
user: clelland
issue_349: state: open
title: Disable DOM clobbering.
user: mikewest
issue_348: state: open
title: Remove "*" from allow=""
user: jan-ivar
issue_342: state: open
title: Request infomation on the serial proposal
user: ghost
issue_337: state: open
title: allow="" attribute model
user: annevk
issue_331: state: open
title: HTTP headers not registered with IANA
user: clelland
issue_322: state: open
title: Feature-Policy: clipboard-read and clipboard-write
user: bershanskiy
issue_320: state: open
title: Feature idea: non-strict-mode
user: Jamesernator
issue_313: state: open
title: HTML <meta>-delivery
user: eeeps
issue_300: state: open
title: Architecture discussion: Sandbox policies
user: clelland
issue_298: state: open
title: Architecture discussion: Permissions
user: clelland
issue_289: state: open
title: Feature Policy: downloads-without-user-activation
user: ehsan-karamad
issue_281: state: open
title: Policy proposal for unsolicited-permission-request
user: triblondon
issue_280: state: open
title: Feature Policy: Service Worker fetch handling
user: kinu
issue_279: state: open
title: Visibility/Testability of policy interventions
user: triblondon
issue_278: state: open
title: Effect of vertical-scroll policy
user: triblondon
labels: feature question: Questions and issues around specific policy-controlled features
issue_277: state: open
title: Terminology issues relating to "feature" and "disabled"
user: triblondon
issue_276: state: open
title: Clarify definition of 'autoplay' policy
user: triblondon
labels: feature question: Questions and issues around specific policy-controlled features
issue_275: state: open
title: Scope of speaker policy
user: triblondon
labels: feature question: Questions and issues around specific policy-controlled features
issue_273: state: open
title: Prevent programmatic focus in iframe
user: marian-r
issue_264: state: open
title: Feature Policy to Enforce/Avoid Feature Policy Propagation to Auxiliary Contexts
user: ehsan-karamad
issue_261: state: open
title: [Proposal] Accessibility policy
user: tdresser
issue_256: state: open
title: Possible race in feature policy in multiprocess implementations
user: bzbarsky
issue_252: state: open
title: Define the scope of feature policy
user: clelland
issue_250: state: open
title: What happened to the webrtc feature?
user: danjenkins
labels: feature question: Questions and issues around specific policy-controlled features
issue_249: state: open
title: HTTP header fields
user: martinthomson
labels: feature question: Questions and issues around specific policy-controlled features
issue_248: state: open
title: How to decide what is governed by feature policy
user: martinthomson
issue_244: state: open
title: Maintain a registry
user: annevk
labels: feature question: Questions and issues around specific policy-controlled features
issue_243: state: open
title: What happened to "notifications"?
user: annevk
labels: feature question: Questions and issues around specific policy-controlled features
issue_242: state: open
title: Very Hard to Read If Dark Theme is used with the dev tools
user: eperret
issue_230: state: open
title: Need to define how 'src' works with sandboxed frames
user: clelland
issue_224: state: open
title: unsigned long? lineNumber and columnNumber in FeaturePolicyViolationReportBody
user: bakulf
issue_222: state: open
title: Need to define the language used to define the ASCII serialization of policy directives
user: bzbarsky
issue_221: state: open
title: Proposal: Ping-policy
user: Malvoz
issue_215: state: open
title: Clarify how features are disabled or enabled
user: johannhof
issue_213: state: open
title: Downloads Feature Policy
user: jkarlin
issue_208: state: open
title: How do I disable everything?
user: billinghamj
labels: feature question: Questions and issues around specific policy-controlled features
issue_207: state: open
title: Feature-Policy and Workers
user: bakulf
issue_206: state: open
title: Proposal: [FeaturePolicy] WebIDL attribute
user: bakulf
issue_198: state: open
title: Clipboard Access
user: lgarron
issue_194: state: open
title: Feature policy + sandbox review notes
user: domenic
issue_189: state: open
title: Proposal: define default for all
user: laukstein
labels: feature question: Questions and issues around specific policy-controlled features
issue_176: state: open
title: Initializing/inheriting feature policy for unattached (?) documents
user: ehsan-karamad
labels: feature question: Questions and issues around specific policy-controlled features
issue_175: state: open
title: Proposal: navigation-override
user: Malvoz
issue_174: state: open
title: Add Feature Policy for workers
user: odejesush
issue_171: state: open
title: Feature policy for not messing with scrolling?
user: kenchris
issue_169: state: open
title: Policies based on device criteria
user: robinglen
labels: feature question: Questions and issues around specific policy-controlled features
issue_167: state: open
title: Delineate relationship between Feature Policy and Origin Policy
user: equalsJeffH
issue_166: state: open
title: Delineate relationship between Feature Policy and Permissions
user: equalsJeffH
issue_162: state: open
title: Disable cross-origin features on sandboxed pages
user: devd
issue_149: state: open
title: The text suggest Feature Policy is superior because sandbox whitelist approach hurt extensibility
user: compulim
issue_146: state: open
title: allow attribute prose and algorithm don't quite agree
user: dbaron
issue_145: state: open
title: spec should offer a little more explanation for other specification authors
user: dbaron
issue_143: state: open
title: Layout Performance/Complexity Policy
user: developit
issue_137: state: open
title: Feature Proposal: disallow-animated-gif
user: addyosmani
issue_136: state: open
title: What's the meaning of the 'Default allowlist' column?
user: jpmedley
labels: feature question: Questions and issues around specific policy-controlled features
issue_132: state: open
title: Feature Proposal: cross-origin rootBounds and rootMargin
user: clelland
issue_129: state: open
title: Feature Proposal: Client Hints delegation
user: igrigorik
issue_124: state: open
title: Ensure that 'self' in feature policy syntax is compatible with CSP
user: clelland
issue_115: state: open
title: "ASCII serialization"
user: annevk
issue_106: state: open
title: allowlist matches
user: annevk
issue_103: state: open
title: "allowlist"
user: annevk
issue_100: state: open
title: Concerns around syntax
user: annevk
issue_99: state: open
title: Header field and parser out of sync?
user: annevk
issue_96: state: open
title: Provide opt-out option to disable HTTP basic-auth on a webpage
user: prbinu
issue_90: state: open
title: Clarify child inheritance
user: clelland
issue_85: state: open
title: Allow document.cookie and maybe Set-Cookie from the server to be controlled
user: annevk
issue_82: state: open
title: Update section on 'Other and related mechanisms'
user: clelland
issue_77: state: open
title: Using FP to support safe pre-rendering
user: triblondon
issue_76: state: open
title: Confusing "speaker" feature
user: AshleyScirra
issue_75: state: open
title: [TAG] New Registry; Strategy for Updates?
user: slightlyoff
issue_74: state: open
title: [TAG] Unify with `sandbox` attribute?
user: slightlyoff
issue_71: state: open
title: [TAG] Confusion over extending policy into child frames
user: triblondon
issue_68: state: open
title: [TAG] Raising error causes
user: triblondon
issue_62: state: open
title: Microsoft's feedback on Feature Policy spec
user: nolanlawson
issue_55: state: open
title: Support for declaring feature policy in HTML
user: clelland
issue_51: state: open
title: Specify handling of IDN / Unicode chars in origins
user: clelland
issue_24: state: open
title: More feature policy ideas
user: AshleyScirra
issue_19: state: open
title: A policy to force temporary permissions
user: jyasskin