@@ -818,13 +818,23 @@ Changes</h2>
818818 * Make featureless elements match nothing.
819819 * Define <a>in the context of a shadow tree</a> .
820820
821- Privacy and Security Considerations {#priv-sec }
821+ Privacy Considerations {#privacy }
822822===============================================
823823
824824This specification introduces Shadow DOM and some shadow-piercing capabilities,
825- but this does not introduce any privacy or security issues--
826- shadow DOM, as currently specified, is intentionally not a privacy/security boundary
827- (and the parts of the UA that use shadow DOM and <em> do</em> have a privacy/security boundary
825+ but this does not introduce any privacy issues--
826+ shadow DOM, as currently specified, is intentionally not a privacy boundary
827+ (and the parts of the UA that use shadow DOM and <em> do</em> have a privacy boundary
828+ implicitly rely on protections not yet specified,
829+ which protect them from the things defined in this specification).
830+
831+ Security Considerations {#security}
832+ ===============================================
833+
834+ This specification introduces Shadow DOM and some shadow-piercing capabilities,
835+ but this does not introduce any security issues--
836+ shadow DOM, as currently specified, is intentionally not a security boundary
837+ (and the parts of the UA that use shadow DOM and <em> do</em> have a security boundary
828838implicitly rely on protections not yet specified,
829839which protect them from the things defined in this specification).
830840
0 commit comments