Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
  • Loading branch information
skyclouds2001 authored Dec 20, 2024
1 parent 498707c commit 1d91bb1
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
4 changes: 2 additions & 2 deletions files/en-us/web/api/window/crossoriginisolated/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ A document will be cross-origin isolated if it is returned with an HTTP response
- {{HTTPHeader("Cross-Origin-Opener-Policy")}} header with the directive `same-origin`.
- {{HTTPHeader("Cross-Origin-Embedder-Policy")}} header with the directive `require-corp` or `credentialless`.

Access to the APIs must also be allowed by the `Permissions-Policy` {{HTTPHeader("Permissions-Policy/cross-origin-isolated","cross-origin-isolated")}}.
Access to the APIs must also be allowed by the `Permissions-Policy` {{HTTPHeader("Permissions-Policy/cross-origin-isolated", "cross-origin-isolated")}}.
Otherwise `crossOriginIsolated` property will return `false`, and the document will not be able to use the APIs listed above with reduced restrictions.

## Value
Expand All @@ -53,7 +53,7 @@ To cross-origin isolate a document:
```

- The {{HTTPHeader("Permissions-Policy/cross-origin-isolated","cross-origin-isolated")}} directive of the {{HTTPHeader("Permissions-Policy")}} header must not block access to the feature.
Note that the default value of the directive is `self`, so the feature will be granted by default to cross-origin isolated documents.
Note that the default allowlist of the directive is `self`, so the permission will be granted by default to cross-origin isolated documents.

### Checking if the document is cross-origin isolated

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ A document will be cross-origin isolated if it is returned with an HTTP response
- {{HTTPHeader("Cross-Origin-Opener-Policy")}} header with the directive `same-origin`.
- {{HTTPHeader("Cross-Origin-Embedder-Policy")}} header with the directive `require-corp` or `credentialless`.

Access to the APIs must also be allowed by the `Permissions-Policy` {{HTTPHeader("Permissions-Policy/cross-origin-isolated","cross-origin-isolated")}}.
Access to the APIs must also be allowed by the `Permissions-Policy` {{HTTPHeader("Permissions-Policy/cross-origin-isolated", "cross-origin-isolated")}}.
Otherwise `crossOriginIsolated` property will return `false`, and the document will not be able to use the APIs listed above with reduced restrictions.

## Value
Expand All @@ -53,7 +53,7 @@ To cross-origin isolate a document:
```

- The {{HTTPHeader("Permissions-Policy/cross-origin-isolated","cross-origin-isolated")}} directive of the {{HTTPHeader("Permissions-Policy")}} header must not block access to the feature.
Note that the default value of the directive is `self`, so the permission will be granted to cross-origin isolated documents by default.
Note that the default allowlist of the directive is `self`, so the permission will be granted by default to cross-origin isolated documents.

### Checking if the document is cross-origin isolated

Expand Down

0 comments on commit 1d91bb1

Please sign in to comment.