Expand description
Capability set inherited down the frame tree.
A browsing context never decides its own privileges from its URL alone.
Instead its effective Permissions are the intersection of the base
capabilities of its own origin and the effective permissions of its parent
frame (Permissions::inherit). By induction a descendant can never hold a
capability its top-level ancestor lacks, so a nested or embedded context
cannot escalate beyond the root document.
Only browser-created chrome origins hold Permissions::chrome (which
includes arbitrary local-file access); ordinary documents, including bundled
resource:/// pages, only ever get Permissions::content_for.
Structsยง
- Permissions
- The capabilities a document is allowed to exercise.