Hi Koji, This is absolutely amazing—it addresses a long-standing pain point on the web.
Currently, many pages feature feed streams that load as the user scrolls. Does the current implementation support pages with dynamically changing heights like this? I noticed the `window.requestResize()` method in the specification, but I’m not sure if it can handle this scenario. Could you add some clarification to the explainer? 在2026年5月25日星期一 UTC+8 16:52:19<ko...@chromium.org> 写道: > 2026年5月20日(水) 23:07 Vladimir Levin <vmp...@chromium.org>: > >> From the explainer, the defense against malicious sites embedding an >> opted-in frame is mitigated by `X-Frame-Options`, but I suspect it's >> `Content-Security-Policy: frame-ancestors` that's needed here for >> cross-origin allowed embeds. Is that right? >> > > I think you're right, I'll update the explainer. Thanks for catching. > > Also the explainer mentions that possibly there's ideas to change the meta >> tag itself: >> > Additional restrictions could be put in place through contents of the >> <meta> tag that would restrict to only explicitly allowed origins. >> >> Out of curiosity, is this being pursued in future work or is CSP deemed >> enough? >> > > I expect to extend this feature further after the initial ship, as I see > even more interest from web authors than I expected. How it would be done > is still not determined yet. > -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscr...@chromium.org. To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/49ffe305-788a-4df7-b394-2a96ca96f28fn%40chromium.org.
