← back to v157 · connection-allowlists-embedded-enforcement
conformance · v157
v157 · connection-allowlists-embedded-enforcement — conformance probe
9 assertions drawn from the spec. Each is a single contract the spec text makes. Pass/fail reflects what this browser executed; blocked means the contract was not run because it needs user mediation, hardware, or another unavailable precondition. Open the page in Chrome stable / canary / Firefox / Safari to compare.
0
pass
0
fail
0
blocked
9
total
| id | contract | kind | verdict | detail |
|---|---|---|---|---|
connectionallowlist-idl-present |
HTMLIFrameElement.prototype exposes the connectionAllowlist reflected IDL attribute (spec §4.1). spec ↗ | script | … | |
idl-reads-content-attribute |
The IDL attribute reflects the content attribute: setAttribute('connectionallowlist', v) is readable as element.connectionAllowlist. spec ↗ | script | … | |
idl-writes-content-attribute |
Writing element.connectionAllowlist sets the content attribute (reflection, IDL to content). spec ↗ | script | … | |
sec-required-header-is-forbidden-to-script |
Sec-Required-Connection-Allowlist is a forbidden request header (Sec- prefix): a page-constructed Request cannot carry it. spec ↗ | script | … | |
urlpattern-engine-available |
Prerequisite machinery: the allowlist grammar resolves members via URL patterns, so the URLPattern engine the spec builds on must exist. spec ↗ | typeof | … | |
requirement-forwarded-on-framed-navigation |
An enforcing user agent sends Sec-Required-Connection-Allowlist with the navigation request of a frame whose embedder set connectionallowlist (verified live by the surface-probe concept's same-origin echo route). spec ↗ | manual | … | |
non-opted-in-frame-blocked |
A framed document that returns neither a satisfying Connection-Allowlist nor Allow-Connection-Allowlist-From is blocked (handshake-lab scenario C). spec ↗ | manual | … | |
allow-from-opt-in-loads-frame |
A framed document opting in via Allow-Connection-Allowlist-From naming the embedder origin loads, with the requirement applied to its connections (handshake-lab scenario B; header compared byte-for-byte like Allow-CSP-From). spec ↗ | manual | … | |
enforced-fetch-blocked-outside-allowlist |
Inside a frame enforced under a PATH-SCOPED allowlist, a fetch to an endpoint matching no allowlist pattern is blocked before the connection (the widget’s blocked/ping fetch). spec ↗ | manual | … |