From 4e13241406873403e34701650173e30fba02aa3f Mon Sep 17 00:00:00 2001
From: domenic
Date: Tue, 14 Nov 2023 01:17:18 +0000
Subject: [PATCH] deploy: 15dda3dd57a851b1eddcea07cff80aca30dae80c
---
speculation-rules.html | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/speculation-rules.html b/speculation-rules.html
index f266930..6b9f473 100644
--- a/speculation-rules.html
+++ b/speculation-rules.html
@@ -1572,7 +1572,7 @@ For each selector of predicate’s selectors:
-
-
Match selector against el with the scoping root set to el’s node document. If the result is true, return true.
+ Match selector against el with the scoping root set to el’s root. If the result is true, return true.
During this step, user agents must apply the same privacy restrictions to the :visited pseudo-class as they would to other selector matching logic that could be observed by authors (e.g., querySelector(selectors)
).
This is important to prevent this from opening an avenue for attackers to gather information about a user’s browsing history, e.g., by using a selector such as
:root:has(.sensitive-site:visited) .report-sensitive-site
. See the
Privacy Considerations section.
@@ -1867,6 +1867,7 @@ node document
origin
querySelector(selectors)
+ root
shadow-including descendant
shadow-including tree order
@@ -2408,9 +2409,10 @@