- Run the following step at the end of [=unblock rendering=]:
-
- 1. [=reveal document|reveal=] |document|.
-
- Issue: Reword the text in the [=render-blocked=] definition, to call [=reveal document=] |document| if the [=implementation-defined=] timeout value has been exceeded.
-
-
-
- In the
Script processing model section,
- move
unblock rendering step to the end.
+
+ Run the following step in [=update the rendering|updating the renedering=], before [=running the animation frame callbacks=]:
- Note: this ensures that the [=reveal document=] steps are called after firing script `load` or `error` events.
+ 1. For each [=fully active=] {{Document}} |doc| in |docs|, [=reveal document|reveal=] |doc|.
- Run the following step in [=Document/reactivate=], before step 4 (querying for [=page showing=]):
+ Run the following step at the end of [=Document/reactivate=]:
- 1. [=Reveal document|reveal=] |document|.
+ 1. Set |document|'s [=is revealed=] to false.
To reveal {{Document}} |document|:
- 1. Assert: |document|'s [=page showing=] is false.
-
- 1. If |document| is [=render-blocked=], then return.
+ 1. If |document|'s [=document/is revealed=] is true, then return.
1. Let |transition| be the result of getting the [=inbound cross-document view-transition=] for |document|.
@@ -322,6 +321,8 @@ The viewTransition [=getter steps=] are
using {{PageRevealEvent}}.
1. If |transition| is not null, then [=activate view transition|activate=] |transition|.
+
+ 1. Set |document|'s [=document/is revealed=] to true.
## Setting up and activating the cross-document view transition ## {#setting-up-and-activating-the-cross-document-view-transition}
@@ -416,7 +417,7 @@ To prevent cross-origin issues, at this point cross-document view transitions ca
same-origin navigations. As discussed in
WICG/view-transitions#200,
this still presents two potential threats:
-1. The
Cross-Origin-Opener-Policy of both documents might be different.
+1. The [=environment settings object/cross-origin isolated capability=] in both documents might be different.
This can cause a situation where a {{Document}} that is [=environment settings object/cross-origin isolated capability|cross-origin isolated=]
can read image data from a document that is not cross-origin isolated. This is already mitigated in [[css-view-transitions-1#sec],
as the same restriction applies for captured cross-origin iframes.
@@ -433,6 +434,11 @@ this still presents two potential threats:
Note: this only applies to server-side redirects. A client-side redirect, e.g. using
[^meta/http-equiv/refresh^], is equivalent to a new navigation.
+1. This feature exposes more information to CSS, as so far CSS was not aware of anything navigation-related.
+ This can raise concerns around safety 3rd-party CSS. However, as a general rule, 3rd-party stylesheets should come
+ from trusted sources to begin with, as CSS can learn about the document or change it in many ways.
+
+
See
Issue #8684 and
WICG/view-transitions#200 for
detailed discussion.