@@ -818,13 +818,23 @@ Changes</h2>
818
818
* Make featureless elements match nothing.
819
819
* Define <a>in the context of a shadow tree</a> .
820
820
821
- Privacy and Security Considerations {#priv-sec }
821
+ Privacy Considerations {#privacy }
822
822
===============================================
823
823
824
824
This specification introduces Shadow DOM and some shadow-piercing capabilities,
825
- but this does not introduce any privacy or security issues--
826
- shadow DOM, as currently specified, is intentionally not a privacy/security boundary
827
- (and the parts of the UA that use shadow DOM and <em> do</em> have a privacy/security boundary
825
+ but this does not introduce any privacy issues--
826
+ shadow DOM, as currently specified, is intentionally not a privacy boundary
827
+ (and the parts of the UA that use shadow DOM and <em> do</em> have a privacy boundary
828
+ implicitly rely on protections not yet specified,
829
+ which protect them from the things defined in this specification).
830
+
831
+ Security Considerations {#security}
832
+ ===============================================
833
+
834
+ This specification introduces Shadow DOM and some shadow-piercing capabilities,
835
+ but this does not introduce any security issues--
836
+ shadow DOM, as currently specified, is intentionally not a security boundary
837
+ (and the parts of the UA that use shadow DOM and <em> do</em> have a security boundary
828
838
implicitly rely on protections not yet specified,
829
839
which protect them from the things defined in this specification).
830
840
0 commit comments