REFERRER/CSP2/CSP3: Move 'referrer' to the Referrer Policy spec.

Author: mikewest

specs/CSP2/index.html

@@ -18,7 +18,6 @@ <h1>Content Security Policy Level 2</h1>
 Indent: 2
 At Risk: [[#csp-request-header]]
 At Risk: [[#directive-child-src]]
-At Risk: [[#directive-referrer]]
 At Risk: [[#directive-reflected-xss]]
 </pre>
 
@@ -316,10 +315,6 @@ <h3 id="changes-from-level-1">Changes from Level 1</h3>
           <a><code>plugin-types</code></a> controls the <a>protected
           resource</a>'s ability to load specific types of plugins.
         </li>
-        <li>
-          <a><code>referrer</code></a> controls the <a>protected resource</a>'s
-          referrer policy [[!REFERRER]].
-        </li>
         <li>
           <a><code>reflected-xss</code></a> controls the user agent's built-in
           heuristics to actively protect against XSS. It is meant to supplant
@@ -2849,58 +2844,6 @@ <h4 id="plugin-types-predeclaration">
     </section>
   </section>
 
-<!--
-████████  ████████ ████████ ████████ ████████  ████████  ████████ ████████
-██     ██ ██       ██       ██       ██     ██ ██     ██ ██       ██     ██
-██     ██ ██       ██       ██       ██     ██ ██     ██ ██       ██     ██
-████████  ██████   ██████   ██████   ████████  ████████  ██████   ████████
-██   ██   ██       ██       ██       ██   ██   ██   ██   ██       ██   ██
-██    ██  ██       ██       ██       ██    ██  ██    ██  ██       ██    ██
-██     ██ ████████ ██       ████████ ██     ██ ██     ██ ████████ ██     ██
--->
-  <section>
-    <h3 id="directive-referrer"><code>referrer</code></h3>
-
-    The <code><dfn>referrer</dfn></code> directive specifies the referrer
-    policy [[!REFERRER]] that the user agent applies when determining what
-    referrer information should be included with requests made, and with
-    <a spec="HTML5">browsing contexts</a> created from the context of the
-    protected resource. The syntax for the name and value of the directive
-    are described by the following ABNF grammar:
-
-    <pre>
-      directive-name    = "referrer"
-      directive-value   = "no-referrer" / "no-referrer-when-downgrade" / "origin" / "origin-when-cross-origin" / "unsafe-url"
-    </pre>
-
-    Note: The directive name does not share the HTTP header's misspelling.
-
-    When <a>enforcing</a> the <code>referrer</code> directive, the user agent
-    MUST execute [[!REFERRER]]'s
-    <a href="https://w3c.github.io/webappsec/specs/referrer-policy/#set-referrer-policy">Set <var>environment</var>'s referrer policy to <var>policy</var>.</a>
-    algorithm on the <a>protected resource</a>'s <a>JavaScript global
-    environment</a> using the result of executing the
-    <a href="https://w3c.github.io/webappsec/specs/referrer-policy/#determine-policy-for-token">Determine <var>token</var>'s Policy</a>
-    algorithm on the <code>referrer</code> directive's value.
-
-    <section class="informative">
-      <h4 id="referrer-usage">Usage</h4>
-
-      <em>This section is not normative.</em>
-
-      A protected resource can prevent referrer leakage by specifying
-      <code>no-referrer</code> as the value of its policy's
-      <code>referrer</code> directive:
-
-      <pre>
-        Content-Security-Policy: referrer no-referrer;
-      </pre>
-
-      This will cause all requests made from the protected resource's
-      context to have an empty <code>Referer</code> [sic] header.
-    </section>
-  </section>
-
 <!--
 ████████  ████████ ████████ ██       ████████  ██████  ████████ ████████ ████████          ██     ██  ██████   ██████
 ██     ██ ██       ██       ██       ██       ██    ██    ██    ██       ██     ██          ██   ██  ██    ██ ██    ██

specs/CSP2/index.src.html

@@ -12,6 +12,7 @@ CSP2: CSP2/index.html CSP2/published/2015-01-CR.html
 CSP3: content-security-policy/index.html
 MIX: mixedcontent/index.html
 POWER: powerfulfeatures/index.html
+REFERRER: referrer-policy/index.html
 UPGRADE: upgrade/index.html
 
 csp-pinning/index.html: csp-pinning/index.src.html biblio.json
@@ -33,7 +34,7 @@ mixedcontent/index.html: mixedcontent/index.src.html biblio.json
 	bikeshed -f spec ./mixedcontent/index.src.html
 
 referrer-policy/index.html: referrer-policy/index.src.html biblio.json
-	bikeshed -q spec ./referrer-policy/index.src.html index.html
+	bikeshed -f spec ./referrer-policy/index.src.html
 
 powerfulfeatures/index.html: powerfulfeatures/index.src.html biblio.json
 	bikeshed -f spec ./powerfulfeatures/index.src.html