Document Permissions Policy as a security mitigation - #275

Open

mlmrx wants to merge 1 commit into

webmachinelearning:mainfrom

mlmrx:ml/document-tools-permissions-policy

mlmrx commented Sep 1, 2026 •

edited

Loading

Summary

document how site authors can disable WebMCP with Permissions Policy
explain the same-origin defense-in-depth benefit for injected or compromised scripts
clarify that the control does not mitigate the underlying script compromise

This follows the deployer guidance proposed by @ck-glen-clarkson in #178.

Closes #178.

Validation

W3C spec-generator: Bikeshed processing with die-on=warning
git diff --check


          Document Permissions Policy as a security mitigation

5ccdc79

mlmrx commented Sep 1, 2026

Author

+@ck-glen-clarkson

mlmrx commented Sep 1, 2026

Author

-@ck-glen-clarkson

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet