• Stars
    star
    141
  • Rank 251,774 (Top 6 %)
  • Language
    HTML
  • License
    Other
  • Created almost 4 years ago
  • Updated 12 days ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Proposal to enable privacy-enhanced preloading

Navigational speculation

Draft specifications

In order to making the experience of navigating on the web faster, user agents employ prefetching and prerendering techniques. However, they have historically been underspecified and inconsistently implemented.

The space is full of challenges which have not been comprehensively tackled: most notably,

  • avoiding user-visible side effects and annoyances from running script on the destination site; and
  • fulfilling the privacy objectives of the user and the referring site.

This repository contains a set of explainers and (eventually) specifications which, combined, give a rigorous model for performing such preloading of content, in an interoperably-implementable way.

Triggering preloading with speculation rules

Today, the underspecified <link rel="prefetch"> and <link rel="prerender"> triggers can be used to request a prefetch or prerender. However, these are limited in what they can express. The proposed <script type="speculationrules"> JSON format allows more detailed configuration, and can be integrated well with user agent heuristics. It also avoids the interoperability and compatibility minefield of these existing <link> behaviors.

See the full explainer for more.

Prerendering details

Prerendering is more complex than prefetching, as it involves running the target page's scripts and loading its subresources. We've produced a couple of relevant explainers:

  • Same-site prerendering, discusses what we believe to be solid so far: user agent-triggered and same-site-triggered prerendering.
  • Prerendering state APIs, discussing the new document.prerendering API and its associated event in more detail.

Cross-origin and cross-site concerns

Much of the complexity of preloading comes in when dealing with site that is cross-origin or cross-site. Origins are the web's security boundary, and sites are its privacy boundary, so any preloading across these boundaries needs to preserve the relevant properties.

Our current proposals are focused around allowing cross-origin/site prefetching, and cross-origin but same-site prerendering. We also have some early thoughts on cross-site prerendering, but have not yet committed to them. The following explainers are relevant:

  • Cross-site preloading fetching modes, discussing how to perform the fetch of the main content and any subresources while doing cross-site preloading.
  • Supports-Loading-Mode, a new header which allows target pages to opt in to being loaded in an uncredentialed mode, with the understanding that they will upgrade their content later upon activation.
  • <meta http-equiv="supports-loading-mode">, an extension to the header definition that uses a HTML preparsing pass to allow it to appear in-document.
  • Client IP anonymization, an extension to prefetching (and maybe one day prerendering?) to require using an anonymizing proxy to hide the user's IP address.
  • Cross-site prerendering, containing what we've brainstormed so far about how cross-site prerendering could work in the future.

Portals

The portals proposal was one of our earliest efforts in this space. We eventually realized that it's part of a larger constellation of features, and decided to turn our attention to prefetching and prerendering, and make them rock-solid, before we return to portals. Once we're confident in the foundations of prerendering content without a visible portal onto it, we plan to return to the portals specification and rebase it on prerendering.

More Repositories

1

webcomponents

Web Components specifications
HTML
4,306
star
2

import-maps

How to control the behavior of JavaScript imports
JavaScript
2,636
star
3

virtual-scroller

1,997
star
4

focus-visible

Polyfill for `:focus-visible`
JavaScript
1,606
star
5

webusb

Connecting hardware to the web.
Bikeshed
1,287
star
6

webpackage

Web packaging format
Go
1,216
star
7

EventListenerOptions

An extension to the DOM event pattern to allow authors to disable support for preventDefault
JavaScript
1,166
star
8

portals

A proposal for enabling seamless navigations between sites or pages
HTML
945
star
9

floc

This proposal has been replaced by the Topics API.
Makefile
933
star
10

inert

Polyfill for the inert attribute and property.
JavaScript
914
star
11

scheduling-apis

APIs for scheduling and controlling prioritized tasks.
HTML
896
star
12

view-transitions

789
star
13

file-system-access

Expose the file system on the user’s device, so Web apps can interoperate with the user’s native applications.
Bikeshed
641
star
14

background-sync

A design and spec for ServiceWorker-based background synchronization
HTML
638
star
15

scroll-to-text-fragment

Proposal to allow specifying a text snippet in a URL fragment
HTML
577
star
16

ua-client-hints

Wouldn't it be nice if `User-Agent` was a (set of) client hints?
Bikeshed
575
star
17

aom

Accessibility Object Model
HTML
553
star
18

kv-storage

[On hold] A proposal for an async key/value storage API for the web
550
star
19

observable

Observable API proposal
Bikeshed
515
star
20

turtledove

TURTLEDOVE
Bikeshed
505
star
21

navigation-api

The new navigation API provides a new interface for navigations and session history, with a focus on single-page application navigations.
Makefile
474
star
22

webmonetization

Proposed Web Monetization standard
HTML
439
star
23

trust-token-api

Trust Token API
Bikeshed
412
star
24

attribution-reporting-api

Attribution Reporting API
Bikeshed
338
star
25

direct-sockets

Direct Sockets API for the web platform
HTML
304
star
26

shape-detection-api

Detection of shapes (faces, QR codes) in images
Bikeshed
299
star
27

display-locking

A repository for the Display Locking spec
HTML
294
star
28

background-fetch

API proposal for background downloading/uploading
Shell
279
star
29

resize-observer

This repository is no longer active. ResizeObserver has moved out of WICG into
HTML
256
star
30

first-party-sets

Bikeshed
255
star
31

serial

Serial ports API for the platform.
HTML
254
star
32

priority-hints

A browser API to enable developers signal the priorities of the resources they need to download.
Bikeshed
228
star
33

dbsc

HTML
227
star
34

is-input-pending

HTML
222
star
35

sanitizer-api

Bikeshed
213
star
36

proposals

A home for well-formed proposed incubations for the web platform. All proposals welcome.
209
star
37

spatial-navigation

Directional focus navigation with arrow keys
JavaScript
199
star
38

js-self-profiling

Proposal for a programmable JS profiling API for collecting JS profiles from real end-user environments
HTML
196
star
39

cq-usecases

Use cases and requirements for standardizing element queries.
HTML
185
star
40

interventions

A place for browsers and web developers to collaborate on user agent interventions.
178
star
41

visual-viewport

A proposal to add explicit APIs to the Web for querying and setting the visual viewport
HTML
174
star
42

frame-timing

Frame Timing API
HTML
170
star
43

layout-instability

A proposal for a Layout Instability specification
Makefile
157
star
44

page-lifecycle

Lifecycle API to support system initiated discarding and freezing
HTML
153
star
45

isolated-web-apps

Repository for explainers and other documents related to the Isolated Web Apps proposal.
Bikeshed
146
star
46

speech-api

Web Speech API
Bikeshed
144
star
47

cookie-store

Asynchronous access to cookies from JavaScript
Bikeshed
141
star
48

construct-stylesheets

API for constructing CSS stylesheet objects
Bikeshed
137
star
49

webhid

Web API for accessing Human Interface Devices (HID)
HTML
135
star
50

color-api

A proposal and draft spec for a Color object for the Web Platform, loosely influenced by the Color.js work. Heavily WIP, if you landed here randomly, please move along.
HTML
124
star
51

devtools-protocol

DevTools Protocol
JavaScript
120
star
52

fenced-frame

Proposal for a strong boundary between a page and its embedded content
Bikeshed
118
star
53

sms-one-time-codes

A way to format SMS messages for use with browser autofill features such as HTML’s autocomplete=one-time-code.
Makefile
109
star
54

bundle-preloading

Bundles of multiple resources, to improve loading JS and the Web.
HTML
103
star
55

netinfo

HTML
95
star
56

intrinsicsize-attribute

Proposal to add an intrinsicsize attribute to media elements
94
star
57

window-controls-overlay

HTML
94
star
58

container-queries

HTML
92
star
59

animation-worklet

🚫 Old repository for AnimationWorklet specification ➑️ New repository: https://github.com/w3c/css-houdini-drafts
Makefile
92
star
60

manifest-incubations

Before install prompt API for installing web applications
HTML
90
star
61

async-append

A way to create DOM and add it to the document without blocking the main thread.
HTML
87
star
62

privacy-preserving-ads

Privacy-Preserving Ads
86
star
63

indexed-db-observers

Prototyping and discussion around indexeddb observers.
WebIDL
83
star
64

shared-storage

Explainer for proposed web platform Shared Storage API
Bikeshed
82
star
65

compression

Standard text for CompressionStream and DecompressionStream API
HTML
81
star
66

file-handling

API for web applications to handle files
81
star
67

compression-dictionary-transport

80
star
68

canvas-color-space

Proposed web platform feature to add color management, wide gamut and high bit-depth support to the <canvas> element.
78
star
69

canvas-formatted-text

HTML
77
star
70

local-font-access

Web API for enumerating fonts on the local system
Bikeshed
75
star
71

performance-measure-memory

performance.measureMemory API
HTML
73
star
72

starter-kit

A simple starter kit for incubations
JavaScript
72
star
73

handwriting-recognition

Handwriting Recognition Web API Proposal
Makefile
72
star
74

css-parser-api

This is the repo where the CSS Houdini parser API will be worked on
HTML
72
star
75

ContentPerformancePolicy

A set of policies that a site guarantees to adhere to, browsers enforce, and embedders can count on.
HTML
72
star
76

web-app-launch

Web App Launch Handler
HTML
72
star
77

pwa-url-handler

71
star
78

eyedropper-api

HTML
70
star
79

idle-detection

A proposal for an idle detection and notification API for the web
Bikeshed
67
star
80

close-watcher

A web API proposal for watching for close requests (e.g. Esc, Android back button, ...)
Makefile
67
star
81

storage-foundation-api-explainer

Explainer showcasing a new web storage API, NativeIO
65
star
82

video-editing

64
star
83

uuid

UUID V4
63
star
84

client-hints-infrastructure

Specification for the Client Hints infrastructure - privacy preserving proactive content negotiation
Bikeshed
61
star
85

sparrow

59
star
86

element-timing

A proposal for an Element Timing specification.
Bikeshed
59
star
87

local-peer-to-peer

↔️ Proposal for local communication between browsers without the aid of a server.
Bikeshed
53
star
88

digital-credentials

Digital Credentials, like driver's licenses
HTML
53
star
89

video-rvfc

video.requestVideoFrameCallback() incubation
HTML
53
star
90

time-to-interactive

Repository for hosting TTI specification and discussions around it.
52
star
91

digital-goods

Makefile
49
star
92

private-network-access

HTML
49
star
93

raw-clipboard-access

An explainer for the Raw Clipboard Access feature
45
star
94

document-picture-in-picture

Bikeshed
45
star
95

admin

πŸ‘‹ Ask your questions here! πŸ‘‹
HTML
42
star
96

soft-navigations

Heuristics to detect Single Page Apps soft navigations
Bikeshed
42
star
97

pending-beacon

A better beaconing API
Bikeshed
40
star
98

webcrypto-secure-curves

Proposal for the addition of Curve25519 and Curve448 to the Web Cryptography API
HTML
40
star
99

entries-api

Spec defining browser support for file/directory upload by drag-and-drop
Bikeshed
40
star
100

transfer-size

38
star