@@ -212,38 +212,6 @@ <h2>
212
212
actually an interface, is sometimes used instead of the more accurate
213
213
"an object implementing the interface < code > Foo</ code > .
214
214
</ p >
215
- < p >
216
- The term < dfn > DOM</ dfn > is used to refer to the API set made available
217
- to scripts in Web applications, and does not necessarily imply the
218
- existence of an actual [=Document=] object or of any other [=Node=]
219
- objects as defined in the [[DOM]] specification.
220
- </ p >
221
- < p >
222
- A DOM attribute is said to be < dfn > getting</ dfn > when its value is
223
- being retrieved (such as by author script), and is said to be
224
- < dfn > setting</ dfn > when a new value is assigned to it.
225
- </ p >
226
- < p >
227
- The term < dfn > JavaScript</ dfn > is used to refer to ECMA262, rather than
228
- the official term ECMAScript, since the term JavaScript is more widely
229
- known. [[ECMASCRIPT]]
230
- </ p >
231
- < p >
232
- The term < dfn > resource</ dfn > is used to refer to elements and any other
233
- user-initiated fetches throughout this specification. For example, a
234
- resource could originate from XMLHttpRequest objects [[XHR]], HTML
235
- elements [[HTML]] such as iframe, img, script, object, embed, and link
236
- with the link type of stylesheet, and SVG elements [[SVG11]] such as
237
- svg.
238
- </ p >
239
- < p >
240
- The term < dfn > cross-origin</ dfn > is used to mean non [=same origin=].
241
- </ p >
242
- < p >
243
- The term < dfn > current document</ dfn > refers to the document associated
244
- with the < a data-cite ="HTML#concept-document-window "> Window object's
245
- newest Document object</ a > .
246
- </ p >
247
215
< p >
248
216
Throughout this work, all time values are measured in milliseconds
249
217
since the start of navigation of the document [[HR-TIME-2]]. For
@@ -504,71 +472,72 @@ <h3>
504
472
</ p >
505
473
< ul >
506
474
< li >
507
- < dfn > "navigation"</ dfn > , if the request is a [=navigation
475
+ < code > "navigation"</ code > , if the request is a [=navigation
508
476
request=];
509
477
</ li >
510
478
< li >
511
- < dfn > "css"</ dfn > , if the request is a result of processing a CSS
512
- < a data-xref-type ="css-function "> url()</ a > directive such as
479
+ < code > "css"</ code > , if the request is a result of processing a CSS
480
+ < a data-cite ="css-values-4 "
481
+ data-xref-type ="css-function "> url()</ a > directive such as
513
482
< code > @import url()</ code > or < code > background: url()</ code > ;
514
483
[[CSS-VALUES]]
515
484
</ li >
516
485
< li >
517
- < dfn > "script"</ dfn > , if the request is a result of loading any
486
+ < code > "script"</ code > , if the request is a result of loading any
518
487
< a data-cite ="HTML#concept-script "> script</ a > (a classic
519
488
[^script^], a [=module script=], or a {{Worker}}).
520
489
</ li >
521
490
< li >
522
- < dfn > "xmlhttprequest"</ dfn > , if the request is a result of
491
+ < code > "xmlhttprequest"</ code > , if the request is a result of
523
492
processing an {{XMLHttpRequest}};
524
493
</ li >
525
494
< li >
526
- < dfn > "fetch"</ dfn > , if the request is the result of processing
495
+ < code > "fetch"</ code > , if the request is the result of processing
527
496
the {{WindowOrWorkerGlobalScope/fetch()}} method;
528
497
</ li >
529
498
< li >
530
- < dfn > "beacon"</ dfn > , if the request is the result of processing
499
+ < code > "beacon"</ code > , if the request is the result of processing
531
500
the {{Navigator/sendBeacon()}} method; [[BEACON]]
532
501
</ li >
533
502
< li >
534
- < dfn > "video"</ dfn > , if the request is the result of processing
503
+ < code > "video"</ code > , if the request is the result of processing
535
504
the [^video^] element's [^video/poster^] or [^video/src^].
536
505
</ li >
537
506
< li >
538
- < dfn > "audio"</ dfn > , if the request is the result of processing
507
+ < code > "audio"</ code > , if the request is the result of processing
539
508
the [^audio^] element's [^audio/src^].
540
509
</ li >
541
510
< li >
542
- < dfn > "track"</ dfn > , if the request is the result of processing
511
+ < code > "track"</ code > , if the request is the result of processing
543
512
the [^track^] element's [^track/src^].
544
513
</ li >
545
514
< li >
546
- < dfn > "img"</ dfn > , if the request is the result of processing the
515
+ < code > "img"</ code > , if the request is the result of processing the
547
516
[^img^] element's [^img/src^] or [^img/srcset^].
548
517
</ li >
549
518
< li >
550
- < dfn > "image"</ dfn > , if the request is the result of processing
519
+ < code > "image"</ code > , if the request is the result of processing
551
520
the < a data-cite ="SVG2/embedded.html#ImageElement "> image</ a >
552
521
element. [[SVG2]]
553
522
</ li >
554
523
< li >
555
- < dfn > "input"</ dfn > , if the request is the result of processing an
524
+ < code > "input"</ code > , if the request is the result of processing an
556
525
[^input^] element of [^input/type^] [^input/type/image^].
557
526
</ li >
558
527
< li >
559
- < dfn > "a"</ dfn > , if the request is the result of processing an
528
+ < code > "a"</ code > , if the request is the result of processing an
560
529
[^a^] element's [^a/download^] or [^a/ping^].
561
530
</ li >
562
531
< li >
563
- < dfn > "iframe"</ dfn > , if the request is the result of processing
532
+ < code > "iframe"</ code > , if the request is the result of processing
564
533
an [^iframe^]'s [^iframe/src^].
565
534
</ li >
566
535
< li >
567
- < dfn > "frame"</ dfn > , if the request is the result of loading a
536
+ < code > "frame"</ code > , if the request is the result of loading a
568
537
[^frame^].
569
538
</ li >
570
539
< li >
571
- < dfn > "other"</ dfn > , if none of the above conditions match.
540
+ < code > "other"</ code > , if none of the above conditions match.
572
541
</ li >
573
542
</ ul >
574
543
</ div >
811
780
</ ol >
812
781
< p >
813
782
The attribute < dfn > onresourcetimingbufferfull</ dfn > is the event
814
- handler for the < dfn > resourcetimingbufferfull</ dfn > event described
783
+ handler for the < code > resourcetimingbufferfull</ code > event described
815
784
below.
816
785
</ p >
817
786
< p >
967
936
Server-side applications may return the < a > Timing-Allow-Origin</ a >
968
937
HTTP response header to allow the User Agent to fully expose, to the
969
938
document origin(s) specified, the values of attributes that would
970
- have been zero due to the < a > cross-origin</ a > restrictions previously
971
- specified in this section.
939
+ have been zero due to those cross-origin restrictions.
972
940
</ p >
973
941
< section id ="sec-timing-allow-origin ">
974
942
< h4 >
@@ -1057,7 +1025,7 @@ <h3>
1057
1025
< p >
1058
1026
The following graph illustrates the timing attributes defined by the
1059
1027
PerformanceResourceTiming interface. Attributes in parenthesis may
1060
- not be available when [=fetch|fetching=] < a > cross-origin</ a >
1028
+ not be available when [=fetch|fetching=] cross-origin
1061
1029
resources. User agents may perform internal processing in between
1062
1030
timings, which allow for non-normative intervals between timings.
1063
1031
</ p >
@@ -1097,7 +1065,7 @@ <h2>
1097
1065
"PERFORMANCE-TIMELINE-2#dfn-queue-a-performanceentry "> Queue</ a >
1098
1066
|entry|.
1099
1067
</ li >
1100
- < li > Add |entry| to |global|'s < a data-cite =
1068
+ < li > [= Add a PerformanceResourceTiming entry|Add=] |entry| to |global|'s < a data-cite =
1101
1069
"PERFORMANCE-TIMELINE-2#dfn-performance-entry-buffer "> performance
1102
1070
entry buffer</ a > .
1103
1071
</ li >
@@ -1138,9 +1106,9 @@ <h2>
1138
1106
</ li >
1139
1107
</ ol >
1140
1108
</ section >
1141
- < section id ="sec-privacy- security " class ='informative '>
1109
+ < section id ="sec-security " class ='informative '>
1142
1110
< h2 >
1143
- Privacy and Security
1111
+ Security Considerations
1144
1112
</ h2 >
1145
1113
< p >
1146
1114
The < a > PerformanceResourceTiming</ a > interface exposes timing
@@ -1154,13 +1122,17 @@ <h2>
1154
1122
HTTP response header, which specifies the domains that are allowed to
1155
1123
access the timing information.
1156
1124
</ p >
1125
+ < section id ="sec-privacy " class ='informative '>
1126
+ < h2 >
1127
+ Privacy Considerations
1128
+ </ h2 >
1157
1129
< p >
1158
1130
Statistical fingerprinting is a privacy concern where a malicious web
1159
1131
site may determine whether a user has visited a third-party web site
1160
1132
by measuring the timing of cache hits and misses of resources in the
1161
1133
third-party web site. Though the < a > PerformanceResourceTiming</ a >
1162
1134
interface gives timing information for resources in a document, the
1163
- cross-origin restrictions in in [=/HTTP Fetch=] prevent making this
1135
+ cross-origin restrictions in [=/HTTP Fetch=] prevent making this
1164
1136
privacy concern any worse than it is today using the load event on
1165
1137
resources to measure timing to determine cache hits and misses.
1166
1138
</ p >
0 commit comments