| 05:48 | <falken> | How does CSS background-image hook into the Fetch spec? I'm trying to determine what the spec says the referrer should be for those requests (the document or the stylesheet?). The closest I can find is https://drafts.csswg.org/css-backgrounds-3/#background-image which leads to https://www.w3.org/TR/CSS21/syndata.html#value-def-uri which doesn't seem to hook into Fetch. |
| 05:54 | <falken> | Browsers look all over the place here https://wpt.fyi/results/service-workers/service-worker/fetch-request-css-base-url.https.html?label=stable&aligned |
| 06:16 | <astearns> | falken: we need to work on that. I think this issue is the placeholder: https://github.com/w3c/csswg-drafts/issues/904 |
| 06:16 | <astearns> | and/or this one: https://github.com/w3c/csswg-drafts/issues/562 |
| 06:18 | <falken> | Thanks! Do you know off-hand what the "correct" expectations should be for referrer of a subresource request from a stylesheet? It looks like Chrome/Firefox use the stylesheet URL after stripping the query, and Edge/Safari use the document URL. (at least for the referrer seen by a service worker) |
| 06:18 | <falken> | If there's no CSS test for this without service workers, maybe this is an over enthusiastic test... |
| 06:19 | <astearns> | I think we discussed something in that area recently, let me look |
| 06:20 | <falken> | great thanks |
| 06:25 | <astearns> | bah - I can't find it. ping TabAtkins about this (probably tomorrow during PST working hours) |
| 06:38 | <falken> | OK thanks, np |
| 12:24 | <annevk> | falken: style sheet URL is the referrer |
| 14:17 | <annevk> | (also seems fine to test) |
| 21:57 | <Domenic> | annevk: ping on https://github.com/whatwg/html/pull/4234 ? I think it's good to go but would be ideal to have your sign-off. |
| 21:58 | <Domenic> | Oh hmm I guess no multi-implementer interest yet. |
| 22:36 | <gsnedders> | anyone know off-hand what browser first limited window.open to user-initated clicks? |
| 22:47 | <Domenic> | I would guess Firefox |
| 22:47 | <Domenic> | I feel like they were the first to advertise "built in popup blocker" |
| 22:48 | <gsnedders> | was it really that late? geez! I know I remember the days before it being commonplace, but still, wow. |
| 23:00 | <falken> | annevk: all right. do you know what the referrer policy is expected to be? Chrome and Firefox use the stylesheet URL after stripping the query. Tracing where referrer gets set in Fetch, looks like the default is "no-referrer-when-downgrade" which wouldn't strip the query. |
| 23:09 | <Domenic> | falken: https://w3c.github.io/webappsec-referrer-policy/#integration-with-css |
| 23:18 | <falken> | Domenic: nice thanks |