Skip to content

Commit 3ec76dc

Browse files
author
reffy-bot
committed
Update of ED report from new reffy run
Using reffy commit 17.2.5.
1 parent 68421d1 commit 3ec76dc

File tree

5 files changed

+60
-36
lines changed

5 files changed

+60
-36
lines changed

‎ed/algorithms/webauthn-3.json

Lines changed: 19 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1339,7 +1339,7 @@
13391339
{
13401340
"html": "<p>The inputs to the algorithm are:</p>",
13411341
"ignored": [
1342-
"A bytestring, clientDataJSON, that contains clientDataJSON — the serialized CollectedClientData that is to be verified. A string, type, that contains the expected type. A byte string, challenge, that contains the challenge byte string that was given in the PublicKeyCredentialRequestOptions or PublicKeyCredentialCreationOptions. A string, origin, that contains the expected origin that issued the request to the user agent. A boolean, crossOrigin, that is true if, and only if, the request should have been performed within a cross-origin iframe."
1342+
"A bytestring, clientDataJSON, that contains clientDataJSON — the serialized CollectedClientData that is to be verified. A string, type, that contains the expected type. A byte string, challenge, that contains the challenge byte string that was given in the PublicKeyCredentialRequestOptions or PublicKeyCredentialCreationOptions. A string, origin, that contains the expected origin that issued the request to the user agent. An optional string, topOrigin, that contains the expected topOrigin that issued the request to the user agent, if available. A boolean, requireTopOrigin, that is true if, and only if, the verification should fail if topOrigin is defined and the topOrigin attribute is not present in clientDataJSON. This means that the verification algorithm is backwards compatible with the JSON-compatible serialization algorithm in Web Authentication Level 2 [webauthn-2-20210408] if, and only if, requireTopOrigin is false."
13431343
]
13441344
},
13451345
{
@@ -1370,16 +1370,28 @@
13701370
"html": "<p>Append 0x2c2263726f73734f726967696e223a (<code>,\"crossOrigin\":</code>) to <var>expected</var>.</p>"
13711371
},
13721372
{
1373-
"html": "If <var>crossOrigin</var> is true:",
1373+
"html": "If <var>topOrigin</var> is defined:",
13741374
"rationale": "append",
13751375
"steps": [
13761376
{
13771377
"html": "<p>Append 0x74727565 (<code>true</code>) to <var>expected</var>.</p>"
1378+
},
1379+
{
1380+
"html": "If <var>requireTopOrigin</var> is true\nor if 0x2c22746f704f726967696e223a (<code>,\"topOrigin\":</code>) is a prefix\nof the substring of <var>clientDataJSON</var> beginning at the offset equal to the length of <var>expected</var>:",
1381+
"rationale": "append",
1382+
"steps": [
1383+
{
1384+
"html": "<p>Append 0x2c22746f704f726967696e223a (<code>,\"topOrigin\":</code>) to <var>expected</var>.</p>"
1385+
},
1386+
{
1387+
"html": "<p>Append <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webauthn/#ccdtostring\" id=\"ref-for-ccdtostring⑦\">CCDToString</a>(<var>topOrigin</var>) to <var>expected</var>.</p>"
1388+
}
1389+
]
13781390
}
13791391
]
13801392
},
13811393
{
1382-
"html": "Otherwise, i.e. <var>crossOrigin</var> is false:",
1394+
"html": "Otherwise, i.e. <var>topOrigin</var> is not defined:",
13831395
"rationale": "append",
13841396
"steps": [
13851397
{
@@ -1785,14 +1797,14 @@
17851797
"html": "<a class=\"self-link\" href=\"https://w3c.github.io/webauthn/#rp-op-registering-a-new-credential-step-origin\"></a> Verify that the value of <code><var>C</var>.<code class=\"idl\"><a data-link-type=\"idl\" href=\"https://w3c.github.io/webauthn/#dom-collectedclientdata-origin\" id=\"ref-for-dom-collectedclientdata-origin⑦\">origin</a></code></code> is an <a data-link-type=\"dfn\" href=\"https://html.spec.whatwg.org/multipage/origin.html#concept-origin\" id=\"ref-for-concept-origin①④\">origin</a> expected by the <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webauthn/#relying-party\" id=\"ref-for-relying-party②④⑨\">Relying Party</a>.\n See <a href=\"https://w3c.github.io/webauthn/#sctn-validating-origin\">§ 13.4.9 Validating the origin of a credential</a> for guidance."
17861798
},
17871799
{
1788-
"html": "If <code><var>C</var>.<code class=\"idl\"><a data-link-type=\"idl\" href=\"https://w3c.github.io/webauthn/#dom-collectedclientdata-toporigin\" id=\"ref-for-dom-collectedclientdata-toporigin⑦\">topOrigin</a></code></code> is present:",
1800+
"html": "If <code><var>C</var>.<code class=\"idl\"><a data-link-type=\"idl\" href=\"https://w3c.github.io/webauthn/#dom-collectedclientdata-toporigin\" id=\"ref-for-dom-collectedclientdata-toporigin⑨\">topOrigin</a></code></code> is present:",
17891801
"rationale": "verify",
17901802
"steps": [
17911803
{
17921804
"html": "<p>Verify that the <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webauthn/#relying-party\" id=\"ref-for-relying-party②⑤⓪\">Relying Party</a> expects that this credential would have been created within an iframe that is\nnot <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors\" id=\"ref-for-same-origin-with-its-ancestors④\">same-origin with its ancestors</a>.</p>"
17931805
},
17941806
{
1795-
"html": "<p>Verify that the value of <code><var>C</var>.<code class=\"idl\"><a data-link-type=\"idl\" href=\"https://w3c.github.io/webauthn/#dom-collectedclientdata-toporigin\" id=\"ref-for-dom-collectedclientdata-toporigin⑧\">topOrigin</a></code></code> matches the <a data-link-type=\"dfn\" href=\"https://html.spec.whatwg.org/multipage/origin.html#concept-origin\" id=\"ref-for-concept-origin①⑤\">origin</a> of a page\nthat the <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webauthn/#relying-party\" id=\"ref-for-relying-party②⑤①\">Relying Party</a> expects to be sub-framed within.\nSee <a href=\"https://w3c.github.io/webauthn/#sctn-validating-origin\">§ 13.4.9 Validating the origin of a credential</a> for guidance.</p>"
1807+
"html": "<p>Verify that the value of <code><var>C</var>.<code class=\"idl\"><a data-link-type=\"idl\" href=\"https://w3c.github.io/webauthn/#dom-collectedclientdata-toporigin\" id=\"ref-for-dom-collectedclientdata-toporigin①⓪\">topOrigin</a></code></code> matches the <a data-link-type=\"dfn\" href=\"https://html.spec.whatwg.org/multipage/origin.html#concept-origin\" id=\"ref-for-concept-origin①⑤\">origin</a> of a page\nthat the <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webauthn/#relying-party\" id=\"ref-for-relying-party②⑤①\">Relying Party</a> expects to be sub-framed within.\nSee <a href=\"https://w3c.github.io/webauthn/#sctn-validating-origin\">§ 13.4.9 Validating the origin of a credential</a> for guidance.</p>"
17961808
}
17971809
]
17981810
},
@@ -1909,14 +1921,14 @@
19091921
"html": "<a class=\"self-link\" href=\"https://w3c.github.io/webauthn/#rp-op-verifying-assertion-step-origin\"></a> Verify that the value of <code><var>C</var>.<code class=\"idl\"><a data-link-type=\"idl\" href=\"https://w3c.github.io/webauthn/#dom-collectedclientdata-origin\" id=\"ref-for-dom-collectedclientdata-origin⑧\">origin</a></code></code> is an <a data-link-type=\"dfn\" href=\"https://html.spec.whatwg.org/multipage/origin.html#concept-origin\" id=\"ref-for-concept-origin①⑥\">origin</a> expected by the <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webauthn/#relying-party\" id=\"ref-for-relying-party②⑦⑤\">Relying Party</a>.\n See <a href=\"https://w3c.github.io/webauthn/#sctn-validating-origin\">§ 13.4.9 Validating the origin of a credential</a> for guidance."
19101922
},
19111923
{
1912-
"html": "If <code><var>C</var>.<code class=\"idl\"><a data-link-type=\"idl\" href=\"https://w3c.github.io/webauthn/#dom-collectedclientdata-toporigin\" id=\"ref-for-dom-collectedclientdata-toporigin⑨\">topOrigin</a></code></code> is present:",
1924+
"html": "If <code><var>C</var>.<code class=\"idl\"><a data-link-type=\"idl\" href=\"https://w3c.github.io/webauthn/#dom-collectedclientdata-toporigin\" id=\"ref-for-dom-collectedclientdata-toporigin①①\">topOrigin</a></code></code> is present:",
19131925
"rationale": "verify",
19141926
"steps": [
19151927
{
19161928
"html": "<p>Verify that the <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webauthn/#relying-party\" id=\"ref-for-relying-party②⑦⑥\">Relying Party</a> expects this credential to be used within an iframe that is not <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors\" id=\"ref-for-same-origin-with-its-ancestors⑤\">same-origin with its ancestors</a>.</p>"
19171929
},
19181930
{
1919-
"html": "<p>Verify that the value of <code><var>C</var>.<code class=\"idl\"><a data-link-type=\"idl\" href=\"https://w3c.github.io/webauthn/#dom-collectedclientdata-toporigin\" id=\"ref-for-dom-collectedclientdata-toporigin①⓪\">topOrigin</a></code></code> matches the <a data-link-type=\"dfn\" href=\"https://html.spec.whatwg.org/multipage/origin.html#concept-origin\" id=\"ref-for-concept-origin①⑦\">origin</a> of a page\nthat the <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webauthn/#relying-party\" id=\"ref-for-relying-party②⑦⑦\">Relying Party</a> expects to be sub-framed within.\nSee <a href=\"https://w3c.github.io/webauthn/#sctn-validating-origin\">§ 13.4.9 Validating the origin of a credential</a> for guidance.</p>"
1931+
"html": "<p>Verify that the value of <code><var>C</var>.<code class=\"idl\"><a data-link-type=\"idl\" href=\"https://w3c.github.io/webauthn/#dom-collectedclientdata-toporigin\" id=\"ref-for-dom-collectedclientdata-toporigin①②\">topOrigin</a></code></code> matches the <a data-link-type=\"dfn\" href=\"https://html.spec.whatwg.org/multipage/origin.html#concept-origin\" id=\"ref-for-concept-origin①⑦\">origin</a> of a page\nthat the <a data-link-type=\"dfn\" href=\"https://w3c.github.io/webauthn/#relying-party\" id=\"ref-for-relying-party②⑦⑦\">Relying Party</a> expects to be sub-framed within.\nSee <a href=\"https://w3c.github.io/webauthn/#sctn-validating-origin\">§ 13.4.9 Validating the origin of a credential</a> for guidance.</p>"
19201932
}
19211933
]
19221934
},

‎ed/ids/webauthn-3.json

Lines changed: 20 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -3263,17 +3263,19 @@
32633263
"https://w3c.github.io/webauthn/#ref-for-dictdef-publickeycredentialrequestoptions%E2%91%A0%E2%93%AA",
32643264
"https://w3c.github.io/webauthn/#ref-for-dictdef-publickeycredentialcreationoptions%E2%91%A6",
32653265
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A4",
3266-
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element",
3266+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A5",
3267+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A6",
32673268
"https://w3c.github.io/webauthn/#ref-for-ccdtostring%E2%91%A3",
32683269
"https://w3c.github.io/webauthn/#ref-for-base64url-encoding%E2%91%A1%E2%91%A0",
32693270
"https://w3c.github.io/webauthn/#ref-for-ccdtostring%E2%91%A4",
32703271
"https://w3c.github.io/webauthn/#ref-for-ccdtostring%E2%91%A5",
3272+
"https://w3c.github.io/webauthn/#ref-for-ccdtostring%E2%91%A6",
32713273
"https://w3c.github.io/webauthn/#clientdatajson-development",
32723274
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-type%E2%91%A5",
32733275
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-challenge%E2%91%A4",
32743276
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A5",
32753277
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-crossorigin%E2%91%A5",
3276-
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A5",
3278+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A7",
32773279
"https://w3c.github.io/webauthn/#ref-for-dictdef-collectedclientdata%E2%91%A0%E2%91%A0",
32783280
"https://w3c.github.io/webauthn/#ref-for-dictdef-collectedclientdata%E2%91%A0%E2%91%A1",
32793281
"https://w3c.github.io/webauthn/#enum-credentialType",
@@ -3515,12 +3517,12 @@
35153517
"https://w3c.github.io/webauthn/#ref-for-abstract-opdef-request-a-credential%E2%91%A0",
35163518
"https://w3c.github.io/webauthn/#sctn-iframe-guidance",
35173519
"https://w3c.github.io/webauthn/#ref-for-web-authentication-api%E2%91%A0%E2%91%A4",
3520+
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element",
35183521
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A0",
3519-
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A1",
35203522
"https://w3c.github.io/webauthn/#ref-for-web-authentication-api%E2%91%A0%E2%91%A5",
35213523
"https://w3c.github.io/webauthn/#ref-for-dom-publickeycredential-discoverfromexternalsource-slot%E2%91%A0%E2%91%A1",
35223524
"https://w3c.github.io/webauthn/#ref-for-attr-iframe-allow",
3523-
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A2",
3525+
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A1",
35243526
"https://w3c.github.io/webauthn/#ref-for-publickey-credentials-get-feature",
35253527
"https://w3c.github.io/webauthn/#ref-for-attr-iframe-allow%E2%91%A0",
35263528
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A0%E2%91%A8%E2%91%A2",
@@ -4645,10 +4647,10 @@
46454647
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A6",
46464648
"https://w3c.github.io/webauthn/#ref-for-concept-origin%E2%91%A0%E2%91%A3",
46474649
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A3%E2%91%A8",
4648-
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A6",
4650+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A8",
46494651
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A4%E2%93%AA",
46504652
"https://w3c.github.io/webauthn/#ref-for-same-origin-with-its-ancestors%E2%91%A3",
4651-
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A7",
4653+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%93%AA",
46524654
"https://w3c.github.io/webauthn/#ref-for-concept-origin%E2%91%A0%E2%91%A4",
46534655
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A4%E2%91%A0",
46544656
"https://w3c.github.io/webauthn/#ref-for-dom-authenticatorresponse-clientdatajson%E2%91%A7",
@@ -4828,10 +4830,10 @@
48284830
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A7",
48294831
"https://w3c.github.io/webauthn/#ref-for-concept-origin%E2%91%A0%E2%91%A5",
48304832
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A6%E2%91%A4",
4831-
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A8",
4833+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A0",
48324834
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A6%E2%91%A5",
48334835
"https://w3c.github.io/webauthn/#ref-for-same-origin-with-its-ancestors%E2%91%A4",
4834-
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%93%AA",
4836+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A1",
48354837
"https://w3c.github.io/webauthn/#ref-for-concept-origin%E2%91%A0%E2%91%A6",
48364838
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A6%E2%91%A6",
48374839
"https://w3c.github.io/webauthn/#rp-op-verifying-assertion-step-rpid-hash",
@@ -6136,7 +6138,7 @@
61366138
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A3%E2%91%A0",
61376139
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A3%E2%91%A1",
61386140
"https://w3c.github.io/webauthn/#sctn-seccons-visibility",
6139-
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A3",
6141+
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A2",
61406142
"https://w3c.github.io/webauthn/#ui-redressing",
61416143
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A3%E2%91%A2",
61426144
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A3%E2%91%A3",
@@ -6307,19 +6309,19 @@
63076309
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A0%E2%91%A8",
63086310
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A6%E2%91%A7",
63096311
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A1%E2%93%AA",
6310-
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A0",
6312+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A2",
63116313
"https://w3c.github.io/webauthn/#ref-for-client-data%E2%91%A0%E2%91%A4",
6312-
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A1",
6314+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A3",
63136315
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A6%E2%91%A8",
63146316
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A7%E2%93%AA",
6315-
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A4",
6316-
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A2",
6317-
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A1%E2%91%A0",
6318-
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A5",
6319-
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A3",
6320-
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A6",
6317+
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A3",
63216318
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A4",
6319+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A1%E2%91%A0",
6320+
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A4",
63226321
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A5",
6322+
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A5",
6323+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A6",
6324+
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A7",
63236325
"https://w3c.github.io/webauthn/#sctn-privacy-considerations",
63246326
"https://w3c.github.io/webauthn/#ref-for-authenticator%E2%91%A2%E2%93%AA%E2%91%A4",
63256327
"https://w3c.github.io/webauthn/#ref-for-client%E2%91%A0%E2%91%A0%E2%91%A6",
@@ -6886,6 +6888,7 @@
68866888
"https://w3c.github.io/webauthn/#biblio-tpmv2-part3",
68876889
"https://w3c.github.io/webauthn/#biblio-url",
68886890
"https://w3c.github.io/webauthn/#biblio-wcag21",
6891+
"https://w3c.github.io/webauthn/#biblio-webauthn-2-20210408",
68896892
"https://w3c.github.io/webauthn/#biblio-webdriver",
68906893
"https://w3c.github.io/webauthn/#biblio-webidl",
68916894
"https://w3c.github.io/webauthn/#informative",

0 commit comments

Comments
 (0)