@webref/xref 1.2.0 → 1.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/ed/dfns/attribution.json +27 -27
- package/ed/dfns/connection-allowlists.json +780 -0
- package/ed/dfns/css-anchor-position-1.json +30 -30
- package/ed/dfns/css-conditional-5.json +40 -0
- package/ed/dfns/css-env-1.json +20 -0
- package/ed/dfns/css-navigation-1.json +186 -72
- package/ed/dfns/did-resolution.json +17 -17
- package/ed/dfns/ecmascript.json +548 -440
- package/ed/dfns/html.json +2328 -516
- package/ed/dfns/manifest-incubations.json +193 -28
- package/ed/dfns/mathml4.json +2 -2
- package/ed/dfns/pointerevents4.json +27 -0
- package/ed/dfns/rdf12-semantics.json +23 -0
- package/ed/dfns/rfc8610.json +6 -5
- package/ed/dfns/sanitizer-api.json +20 -0
- package/ed/dfns/selectors-4.json +1 -1
- package/ed/dfns/soft-navigations.json +93 -137
- package/ed/dfns/speech-api.json +22 -0
- package/ed/dfns/vc-recognized-entities.json +6 -6
- package/ed/dfns/web-smart-card.json +1065 -1151
- package/ed/dfns/webdriver-bidi.json +932 -17
- package/ed/dfns/webmcp.json +16 -38
- package/ed/dfns/webnn.json +20 -0
- package/ed/dfns/webrtc-encoded-transform.json +28 -28
- package/ed/dfns/webrtc-ice.json +2 -2
- package/ed/dfns/webxrlayers-1.json +63 -50
- package/ed/headings/SVG2.json +1 -1
- package/ed/headings/attribution.json +65 -43
- package/ed/headings/connection-allowlists.json +228 -0
- package/ed/headings/css-navigation-1.json +14 -7
- package/ed/headings/design-principles.json +12 -5
- package/ed/headings/did-resolution.json +161 -92
- package/ed/headings/digital-credentials.json +3 -3
- package/ed/headings/dom.json +1 -1
- package/ed/headings/ecmascript.json +291 -249
- package/ed/headings/geolocation-element.json +1 -1
- package/ed/headings/html-aam-1.0.json +6 -6
- package/ed/headings/html-ruby-extensions.json +13 -0
- package/ed/headings/html.json +123 -32
- package/ed/headings/largest-contentful-paint.json +1 -1
- package/ed/headings/manifest-incubations.json +68 -8
- package/ed/headings/mathml4.json +50 -50
- package/ed/headings/rfc8610.json +0 -7
- package/ed/headings/secure-payment-confirmation.json +1 -1
- package/ed/headings/selectors-4.json +57 -8
- package/ed/headings/service-workers.json +1 -1
- package/ed/headings/shacl12-rules.json +4 -14
- package/ed/headings/soft-navigations.json +2 -2
- package/ed/headings/storage-access.json +2 -2
- package/ed/headings/tc39-atomics-microwait.json +1 -1
- package/ed/headings/url.json +1 -1
- package/ed/headings/vc-data-model-2.1.json +72 -72
- package/ed/headings/vc-jose-cose.json +70 -70
- package/ed/headings/vc-recognized-entities.json +62 -32
- package/ed/headings/web-smart-card.json +106 -217
- package/ed/headings/webaudio-1.0.json +1 -1
- package/ed/headings/webaudio-1.1.json +1 -1
- package/ed/headings/webdriver-bidi.json +15 -1
- package/ed/headings/webidl.json +1 -1
- package/ed/headings/webmcp.json +157 -4
- package/ed/headings/webnn.json +1 -1
- package/ed/headings/webrtc-encoded-transform.json +1 -1
- package/ed/headings/webxrlayers-1.json +1 -1
- package/package.json +1 -1
- package/specs.json +151 -116
- package/tr/dfns/attribution.json +27 -27
- package/tr/dfns/did-resolution.json +17 -17
- package/tr/dfns/mathml4.json +2 -2
- package/tr/dfns/picture-in-picture.json +58 -18
- package/tr/dfns/pointerevents4.json +27 -0
- package/tr/dfns/webdriver-bidi.json +932 -17
- package/tr/dfns/webnn.json +20 -0
- package/tr/dfns/webrtc-encoded-transform.json +28 -28
- package/tr/dfns/webxrlayers-1.json +63 -50
- package/tr/headings/attribution.json +65 -43
- package/tr/headings/did-resolution.json +161 -92
- package/tr/headings/digital-credentials.json +3 -3
- package/tr/headings/html-aam-1.0.json +6 -6
- package/tr/headings/mathml4.json +50 -50
- package/tr/headings/picture-in-picture.json +5 -5
- package/tr/headings/secure-payment-confirmation.json +1 -1
- package/tr/headings/service-workers.json +1 -1
- package/tr/headings/shacl12-rules.json +4 -14
- package/tr/headings/webauthn-3.json +9 -2
- package/tr/headings/webdriver-bidi.json +15 -1
- package/tr/headings/webnn.json +1 -1
- package/tr/headings/webrtc-encoded-transform.json +1 -1
- package/tr/headings/webxrlayers-1.json +1 -1
package/ed/headings/webmcp.json
CHANGED
|
@@ -60,10 +60,10 @@
|
|
|
60
60
|
"number": "4"
|
|
61
61
|
},
|
|
62
62
|
{
|
|
63
|
-
"id": "
|
|
64
|
-
"href": "https://webmachinelearning.github.io/webmcp/#
|
|
63
|
+
"id": "document-extension",
|
|
64
|
+
"href": "https://webmachinelearning.github.io/webmcp/#document-extension",
|
|
65
65
|
"level": 3,
|
|
66
|
-
"title": "Extensions to
|
|
66
|
+
"title": "Extensions to Document",
|
|
67
67
|
"number": "4.1"
|
|
68
68
|
},
|
|
69
69
|
{
|
|
@@ -140,9 +140,156 @@
|
|
|
140
140
|
"id": "security-privacy",
|
|
141
141
|
"href": "https://webmachinelearning.github.io/webmcp/#security-privacy",
|
|
142
142
|
"level": 2,
|
|
143
|
-
"title": "Security and
|
|
143
|
+
"title": "Security and Privacy Considerations",
|
|
144
144
|
"number": "6"
|
|
145
145
|
},
|
|
146
|
+
{
|
|
147
|
+
"id": "approach-to-risk-assessment-and-mitigations",
|
|
148
|
+
"href": "https://webmachinelearning.github.io/webmcp/#approach-to-risk-assessment-and-mitigations",
|
|
149
|
+
"level": 3,
|
|
150
|
+
"title": "Approach to Risk Assessment and Mitigations",
|
|
151
|
+
"number": "6.1"
|
|
152
|
+
},
|
|
153
|
+
{
|
|
154
|
+
"id": "agent-baseline-capabilities",
|
|
155
|
+
"href": "https://webmachinelearning.github.io/webmcp/#agent-baseline-capabilities",
|
|
156
|
+
"level": 3,
|
|
157
|
+
"title": "Agent Baseline Capabilities",
|
|
158
|
+
"number": "6.2"
|
|
159
|
+
},
|
|
160
|
+
{
|
|
161
|
+
"id": "key-risks",
|
|
162
|
+
"href": "https://webmachinelearning.github.io/webmcp/#key-risks",
|
|
163
|
+
"level": 3,
|
|
164
|
+
"title": "Key Security and Privacy Risks",
|
|
165
|
+
"number": "6.3"
|
|
166
|
+
},
|
|
167
|
+
{
|
|
168
|
+
"id": "prompt-injection",
|
|
169
|
+
"href": "https://webmachinelearning.github.io/webmcp/#prompt-injection",
|
|
170
|
+
"level": 4,
|
|
171
|
+
"title": "Prompt Injection Attacks",
|
|
172
|
+
"number": "6.3.1"
|
|
173
|
+
},
|
|
174
|
+
{
|
|
175
|
+
"id": "metadata-description-attacks",
|
|
176
|
+
"href": "https://webmachinelearning.github.io/webmcp/#metadata-description-attacks",
|
|
177
|
+
"level": 5,
|
|
178
|
+
"title": "Metadata / Description Attacks (Tool Poisoning)",
|
|
179
|
+
"number": "6.3.1.1"
|
|
180
|
+
},
|
|
181
|
+
{
|
|
182
|
+
"id": "output-injection-attacks",
|
|
183
|
+
"href": "https://webmachinelearning.github.io/webmcp/#output-injection-attacks",
|
|
184
|
+
"level": 5,
|
|
185
|
+
"title": "Output Injection Attacks",
|
|
186
|
+
"number": "6.3.1.2"
|
|
187
|
+
},
|
|
188
|
+
{
|
|
189
|
+
"id": "tool-implementation-targets",
|
|
190
|
+
"href": "https://webmachinelearning.github.io/webmcp/#tool-implementation-targets",
|
|
191
|
+
"level": 5,
|
|
192
|
+
"title": "Tool Implementation as Attack Targets",
|
|
193
|
+
"number": "6.3.1.3"
|
|
194
|
+
},
|
|
195
|
+
{
|
|
196
|
+
"id": "misrepresentation-of-intent",
|
|
197
|
+
"href": "https://webmachinelearning.github.io/webmcp/#misrepresentation-of-intent",
|
|
198
|
+
"level": 4,
|
|
199
|
+
"title": "Misrepresentation of Intent",
|
|
200
|
+
"number": "6.3.2"
|
|
201
|
+
},
|
|
202
|
+
{
|
|
203
|
+
"id": "why-intent-matters",
|
|
204
|
+
"href": "https://webmachinelearning.github.io/webmcp/#why-intent-matters",
|
|
205
|
+
"level": 5,
|
|
206
|
+
"title": "Why This Matters",
|
|
207
|
+
"number": "6.3.2.1"
|
|
208
|
+
},
|
|
209
|
+
{
|
|
210
|
+
"id": "misalignment-types",
|
|
211
|
+
"href": "https://webmachinelearning.github.io/webmcp/#misalignment-types",
|
|
212
|
+
"level": 5,
|
|
213
|
+
"title": "Misalignment Types",
|
|
214
|
+
"number": "6.3.2.2"
|
|
215
|
+
},
|
|
216
|
+
{
|
|
217
|
+
"id": "scenario-ambiguous-finalization",
|
|
218
|
+
"href": "https://webmachinelearning.github.io/webmcp/#scenario-ambiguous-finalization",
|
|
219
|
+
"level": 5,
|
|
220
|
+
"title": "Scenario: Ambiguous Finalization (Accidental or Malicious)",
|
|
221
|
+
"number": "6.3.2.3"
|
|
222
|
+
},
|
|
223
|
+
{
|
|
224
|
+
"id": "intent-current-gaps",
|
|
225
|
+
"href": "https://webmachinelearning.github.io/webmcp/#intent-current-gaps",
|
|
226
|
+
"level": 5,
|
|
227
|
+
"title": "Current Gaps",
|
|
228
|
+
"number": "6.3.2.4"
|
|
229
|
+
},
|
|
230
|
+
{
|
|
231
|
+
"id": "privacy-leakage-over-parameterization",
|
|
232
|
+
"href": "https://webmachinelearning.github.io/webmcp/#privacy-leakage-over-parameterization",
|
|
233
|
+
"level": 4,
|
|
234
|
+
"title": "Privacy Leakage Through Over-Parameterization",
|
|
235
|
+
"number": "6.3.3"
|
|
236
|
+
},
|
|
237
|
+
{
|
|
238
|
+
"id": "privacy-risk",
|
|
239
|
+
"href": "https://webmachinelearning.github.io/webmcp/#privacy-risk",
|
|
240
|
+
"level": 5,
|
|
241
|
+
"title": "The Privacy Risk",
|
|
242
|
+
"number": "6.3.3.1"
|
|
243
|
+
},
|
|
244
|
+
{
|
|
245
|
+
"id": "attack-example-overparameterization",
|
|
246
|
+
"href": "https://webmachinelearning.github.io/webmcp/#attack-example-overparameterization",
|
|
247
|
+
"level": 5,
|
|
248
|
+
"title": "Example Attack",
|
|
249
|
+
"number": "6.3.3.2"
|
|
250
|
+
},
|
|
251
|
+
{
|
|
252
|
+
"id": "privacy-implications",
|
|
253
|
+
"href": "https://webmachinelearning.github.io/webmcp/#privacy-implications",
|
|
254
|
+
"level": 5,
|
|
255
|
+
"title": "Implications",
|
|
256
|
+
"number": "6.3.3.3"
|
|
257
|
+
},
|
|
258
|
+
{
|
|
259
|
+
"id": "violation-same-origin-boundaries",
|
|
260
|
+
"href": "https://webmachinelearning.github.io/webmcp/#violation-same-origin-boundaries",
|
|
261
|
+
"level": 4,
|
|
262
|
+
"title": "Violation of Same-Origin Boundaries",
|
|
263
|
+
"number": "6.3.4"
|
|
264
|
+
},
|
|
265
|
+
{
|
|
266
|
+
"id": "mitigations",
|
|
267
|
+
"href": "https://webmachinelearning.github.io/webmcp/#mitigations",
|
|
268
|
+
"level": 3,
|
|
269
|
+
"title": "Mitigations",
|
|
270
|
+
"number": "6.4"
|
|
271
|
+
},
|
|
272
|
+
{
|
|
273
|
+
"id": "mitigation-restrict-input-lengths",
|
|
274
|
+
"href": "https://webmachinelearning.github.io/webmcp/#mitigation-restrict-input-lengths",
|
|
275
|
+
"level": 4,
|
|
276
|
+
"title": "Restricting maximum input lengths",
|
|
277
|
+
"number": "6.4.1"
|
|
278
|
+
},
|
|
279
|
+
{
|
|
280
|
+
"id": "mitigation-shared-attack-evals",
|
|
281
|
+
"href": "https://webmachinelearning.github.io/webmcp/#mitigation-shared-attack-evals",
|
|
282
|
+
"level": 4,
|
|
283
|
+
"title": "Supporting interoperable probabilistic defense structures through shared attack eval datasets",
|
|
284
|
+
"number": "6.4.2"
|
|
285
|
+
},
|
|
286
|
+
{
|
|
287
|
+
"id": "mitigation-untrusted-annotation",
|
|
288
|
+
"href": "https://webmachinelearning.github.io/webmcp/#mitigation-untrusted-annotation",
|
|
289
|
+
"level": 4,
|
|
290
|
+
"title": "Untrusted Annotation for Tool Responses",
|
|
291
|
+
"number": "6.4.3"
|
|
292
|
+
},
|
|
146
293
|
{
|
|
147
294
|
"id": "accessibility",
|
|
148
295
|
"href": "https://webmachinelearning.github.io/webmcp/#accessibility",
|
|
@@ -187,6 +334,12 @@
|
|
|
187
334
|
"level": 3,
|
|
188
335
|
"title": "Normative References"
|
|
189
336
|
},
|
|
337
|
+
{
|
|
338
|
+
"id": "informative",
|
|
339
|
+
"href": "https://webmachinelearning.github.io/webmcp/#informative",
|
|
340
|
+
"level": 3,
|
|
341
|
+
"title": "Non-Normative References"
|
|
342
|
+
},
|
|
190
343
|
{
|
|
191
344
|
"id": "idl-index",
|
|
192
345
|
"href": "https://webmachinelearning.github.io/webmcp/#idl-index",
|
package/ed/headings/webnn.json
CHANGED