chrome-devtools-frontend 1.0.1040857 → 1.0.1070764

package/front_end/models/har/HARFormat.ts

@@ -3,6 +3,8 @@
 // found in the LICENSE file.
 
 import type * as Platform from '../../core/platform/platform.js';
+import * as SDK from '../../core/sdk/sdk.js';
+import type * as Protocol from '../../generated/protocol.js';
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 
@@ -374,17 +376,78 @@ export class HARTimings extends HARBase {
 }
 
 export class HARInitiator extends HARBase {
-  type: string|undefined;
-  url: string|undefined;
-  lineNumber: number|undefined;
+  type: Protocol.Network.InitiatorType;
+  url?: string;
+  lineNumber?: number;
+  requestId?: Protocol.Network.RequestId;
+  stack?: HARStack;
   /**
-   * Based on Initiator defined in browser_protocol.pdl
+   * Based on Protocol.Network.Initiator defined in browser_protocol.pdl
    */
   constructor(data: any) {
     super(data);
-    this.type = HARBase.optionalString(data['type']);
+    this.type = (HARBase.optionalString(data['type']) ?? SDK.NetworkRequest.InitiatorType.Other) as
+        Protocol.Network.InitiatorType;
     this.url = HARBase.optionalString(data['url']);
     this.lineNumber = HARBase.optionalNumber(data['lineNumber']);
+    this.requestId = HARBase.optionalString(data['requestId']) as Protocol.Network.RequestId;
+    if (data['stack']) {
+      this.stack = new HARStack(data['stack']);
+    }
+  }
+}
+
+export class HARStack extends HARBase {
+  description?: string;
+  callFrames: HARCallFrame[];
+  parent?: HARStack;
+  parentId?: {
+    id: string,
+    debuggerId?: Protocol.Runtime.UniqueDebuggerId,
+  };
+  /**
+  * Based on Protocol.Runtime.StackTrace defined in browser_protocol.pdl
+   */
+  constructor(data: any) {
+    super(data);
+
+    this.callFrames = Array.isArray(data.callFrames) ?
+        data.callFrames.map((item: any) => item ? new HARCallFrame(item) : null).filter(Boolean) :
+        [];
+
+    if (data['parent']) {
+      this.parent = new HARStack(data['parent']);
+    }
+
+    this.description = HARBase.optionalString(data['description']);
+
+    const parentId = data['parentId'];
+    if (parentId) {
+      this.parentId = {
+        id: HARBase.optionalString(parentId['id']) ?? '',
+        debuggerId: HARBase.optionalString(parentId['debuggerId']) as Protocol.Runtime.UniqueDebuggerId | undefined,
+      };
+    }
+  }
+}
+
+export class HARCallFrame extends HARBase {
+  functionName: string;
+  scriptId: Protocol.Runtime.ScriptId;
+  url: string = '';
+  lineNumber: number = -1;
+  columnNumber: number = -1;
+  /**
+  * Based on Protocol.Runtime.CallFrame defined in browser_protocol.pdl
+   */
+  constructor(data: any) {
+    super(data);
+
+    this.functionName = HARBase.optionalString(data['functionName']) ?? '';
+    this.scriptId = (HARBase.optionalString(data['scriptId']) ?? '') as Protocol.Runtime.ScriptId;
+    this.url = HARBase.optionalString(data['url']) ?? '';
+    this.lineNumber = HARBase.optionalNumber(data['lineNumber']) ?? -1;
+    this.columnNumber = HARBase.optionalNumber(data['columnNumber']) ?? -1;
   }
 }
 

package/front_end/models/har/Importer.ts

@@ -25,17 +25,15 @@ export class Importer {
           pageref ? pageLoads.get(pageref) : undefined;
       const documentURL = pageLoad ? pageLoad.mainRequest.url() : entry.request.url;
 
-      let initiator: {
-        type: Protocol.Network.InitiatorType,
-        url: string|undefined,
-        lineNumber: number|undefined,
-      }|null = null;
+      let initiator: Protocol.Network.Initiator|null = null;
       const initiatorEntry = entry.customInitiator();
       if (initiatorEntry) {
         initiator = {
           type: (initiatorEntry.type as Protocol.Network.InitiatorType),
           url: initiatorEntry.url,
           lineNumber: initiatorEntry.lineNumber,
+          requestId: initiatorEntry.requestId,
+          stack: initiatorEntry.stack,
         };
       }
       const request = SDK.NetworkRequest.NetworkRequest.createWithoutBackendRequest(

package/front_end/models/har/Log.ts

@@ -130,6 +130,9 @@ export class Entry {
       if (initiator.url !== undefined) {
         exportedInitiator.url = initiator.url;
       }
+      if (initiator.requestId !== undefined) {
+        exportedInitiator.requestId = initiator.requestId;
+      }
       if (initiator.lineNumber !== undefined) {
         exportedInitiator.lineNumber = initiator.lineNumber;
       }

package/front_end/models/issues_manager/AttributionReportingIssue.ts

@@ -10,6 +10,7 @@ import {type MarkdownIssueDescription} from './MarkdownIssueDescription.js';
 
 export const enum IssueCode {
   PermissionPolicyDisabled = 'AttributionReportingIssue::PermissionPolicyDisabled',
+  PermissionPolicyNotDelegated = 'AttributionReportingIssue::PermissionPolicyNotDelegated',
   UntrustworthyReportingOrigin = 'AttributionReportingIssue::UntrustworthyReportingOrigin',
   InsecureContext = 'AttributionReportingIssue::InsecureContext',
   InvalidRegisterSourceHeader = 'AttributionReportingIssue::InvalidRegisterSourceHeader',
@@ -28,6 +29,8 @@ function getIssueCode(details: Protocol.Audits.AttributionReportingIssueDetails)
   switch (details.violationType) {
     case Protocol.Audits.AttributionReportingIssueType.PermissionPolicyDisabled:
       return IssueCode.PermissionPolicyDisabled;
+    case Protocol.Audits.AttributionReportingIssueType.PermissionPolicyNotDelegated:
+      return IssueCode.PermissionPolicyNotDelegated;
     case Protocol.Audits.AttributionReportingIssueType.UntrustworthyReportingOrigin:
       return IssueCode.UntrustworthyReportingOrigin;
     case Protocol.Audits.AttributionReportingIssueType.InsecureContext:
@@ -76,6 +79,11 @@ export class AttributionReportingIssue extends Issue<IssueCode> {
           file: 'arPermissionPolicyDisabled.md',
           links: [],
         };
+      case IssueCode.PermissionPolicyNotDelegated:
+        return {
+          file: 'arPermissionPolicyNotDelegated.md',
+          links: [],
+        };
       case IssueCode.UntrustworthyReportingOrigin:
         return {
           file: 'arUntrustworthyReportingOrigin.md',
@@ -131,7 +139,22 @@ export class AttributionReportingIssue extends Issue<IssueCode> {
   }
 
   getKind(): IssueKind {
-    return IssueKind.PageError;
+    switch (this.code()) {
+      case IssueCode.PermissionPolicyNotDelegated:
+        return IssueKind.BreakingChange;
+      case IssueCode.PermissionPolicyDisabled:
+      case IssueCode.UntrustworthyReportingOrigin:
+      case IssueCode.InsecureContext:
+      case IssueCode.InvalidRegisterSourceHeader:
+      case IssueCode.InvalidRegisterTriggerHeader:
+      case IssueCode.InvalidEligibleHeader:
+      case IssueCode.TooManyConcurrentRequests:
+      case IssueCode.SourceAndTriggerHeaders:
+      case IssueCode.SourceIgnored:
+      case IssueCode.TriggerIgnored:
+      case IssueCode.Unknown:
+        return IssueKind.PageError;
+    }
   }
 
   static fromInspectorIssue(issuesModel: SDK.IssuesModel.IssuesModel, inspectorIssue: Protocol.Audits.InspectorIssue):

package/front_end/models/issues_manager/DeprecationIssue.ts

@@ -46,22 +46,28 @@ const UIStrings = {
   canRequestURLHTTPContainingNewline:
       'Resource requests whose URLs contained both removed whitespace `\\(n|r|t)` characters and less-than characters (`<`) are blocked. Please remove newlines and encode less-than characters from places like element attribute values in order to load these resources.',
   /**
-   * @description TODO(crbug.com/1320335): Description needed for translation
+   * @description This warning occurs when the website attempts to invoke the
+   *    deprecated `chrome.loadTimes().connectionInfo` API.
    */
   chromeLoadTimesConnectionInfo:
       '`chrome.loadTimes()` is deprecated, instead use standardized API: Navigation Timing 2.',
   /**
-   * @description TODO(crbug.com/1320336): Description needed for translation
+   * @description This warning occurs when the website attempts to invoke the
+   *    deprecated `chrome.loadTimes().firstPaintAfterLoadTime` API.
    */
   chromeLoadTimesFirstPaintAfterLoadTime:
       '`chrome.loadTimes()` is deprecated, instead use standardized API: Paint Timing.',
   /**
-   * @description TODO(crbug.com/1320337): Description needed for translation
+   * @description This warning occurs when the website attempts to invoke the
+   *    deprecated `chrome.loadTimes().wasAlternateProtocolAvailable` API.
    */
   chromeLoadTimesWasAlternateProtocolAvailable:
       '`chrome.loadTimes()` is deprecated, instead use standardized API: `nextHopProtocol` in Navigation Timing 2.',
   /**
-   * @description TODO(crbug.com/1318847): Description needed for translation
+   * @description This warning occurs when the browser attempts to store a
+   *    cookie containing a banned character. Rather than the cookie string
+   *    being truncated at the banned character, the entire cookie will be
+   *    rejected now.
    */
   cookieWithTruncatingChar: 'Cookies containing a `\\(0|r|n)` character will be rejected instead of truncated.',
   /**
@@ -119,7 +125,9 @@ const UIStrings = {
   geolocationInsecureOriginDeprecatedNotRemoved:
       '`getCurrentPosition()` and `watchPosition()` are deprecated on insecure origins. To use this feature, you should consider switching your application to a secure origin, such as HTTPS. See https://goo.gle/chrome-insecure-origins for more details.',
   /**
-   * @description TODO(crbug.com/1318858): Description needed for translation
+   * @description This warning occurs when the `getUserMedia()` API is invoked
+   *    on an insecure (e.g., HTTP) site. This is only permitted on secure sites
+   *    (e.g., HTTPS).
    */
   getUserMediaInsecureOrigin:
       '`getUserMedia()` no longer works on insecure origins. To use this feature, you should consider switching your application to a secure origin, such as HTTPS. See https://goo.gle/chrome-insecure-origins for more details.',
@@ -135,34 +143,87 @@ const UIStrings = {
    */
   identityInCanMakePaymentEvent: 'The merchant origin and arbitrary data from the `canmakepayment` service worker event are deprecated and will be removed: `topOrigin`, `paymentRequestOrigin`, `methodData`, `modifiers`.',
   /**
-   * @description TODO(crbug.com/1320343): Description needed for translation
+   * @description This warning occurs when an insecure context (e.g., HTTP)
+   *    requests a private resource (not on open internet). This is done to
+   *    mitigate the potential for CSRF and other attacks.
    */
   insecurePrivateNetworkSubresourceRequest:
       'The website requested a subresource from a network that it could only access because of its users\' privileged network position. These requests expose non-public devices and servers to the internet, increasing the risk of a cross-site request forgery (CSRF) attack, and/or information leakage. To mitigate these risks, Chrome deprecates requests to non-public subresources when initiated from non-secure contexts, and will start blocking them.',
   /**
-   * @description A deprecation warning shown in the DevTools Issues tab.
-   * It's shown when a video conferencing website attempts to disable
-   * use of IPv6 addresses with a non-standard API.
-   */
-  legacyConstraintGoogIPv6:
-      'IPv6 is enabled-by-default and the ability to disable it using `googIPv6` is targeted to be removed in M108, after which it will be ignored. Please stop using this legacy constraint.',
-  /**
-   * @description TODO(crbug.com/1318865): Description needed for translation
+   * @description This warning occurs when a stylesheet loaded from a local
+   *    file directive does not end in the file type `.css`.
    */
   localCSSFileExtensionRejected:
       'CSS cannot be loaded from `file:` URLs unless they end in a `.css` file extension.',
   /**
-   * @description TODO(crbug.com/1320345): Description needed for translation
+   * @description This is a deprecation warning to developers that occurs when
+   * the script attempts to use the Media Source Extensions API in a way that
+   * is no longer supported by the specification for the API. The usage
+   * that is problematic is when the script calls the `SourceBuffer.abort()`
+   * method at a time when there is still processing happening in response to a
+   * previous `SourceBuffer.remove()` call for the same SourceBuffer object.
+   * More precisely, we show this warning to developers when script calls the
+   * SourceBuffer abort() method while the asynchronous processing of a remove()
+   * call on that SourceBuffer is not yet complete. Early versions of the Media
+   * Source Extensions specification allowed such aborts, but standardization of
+   * the specification resulted in disallowing the aborts. The script should
+   * instead wait for the asynchronous remove() operation to complete, which is
+   * observable by listening for the associated 'updateend' event from the
+   * SourceBuffer. A note is also included in the warning, describing when
+   * abort() is meaningful and allowed by the specification for purposes other
+   * than interrupting a remove() operation's asynchronous steps. Those
+   * supported purposes include using abort() to interrupt processing that may
+   * still be happening in response to a previous appendBuffer() call on that
+   * SourceBuffer, or using abort() to clear the internal of any unprocessed
+   * data remaining from previous appendBuffer() calls.
+   * See https://www.w3.org/TR/media-source-2/#dom-sourcebuffer-abort for the
+   * currently specified behavior, which would throw an exception once the
+   * deprecated removal abort is no longer supported.
+   * See https://github.com/w3c/media-source/issues/19 for the discussion that
+   * led to the specification change.
    */
   mediaSourceAbortRemove:
       'Using `SourceBuffer.abort()` to abort `remove()`\'s asynchronous range removal is deprecated due to specification change. Support will be removed in the future. You should listen to the `updateend` event instead. `abort()` is intended to only abort an asynchronous media append or reset parser state.',
   /**
-   * @description TODO(crbug.com/1320346): Description needed for translation
+   * @description This is a deprecation warning to developers that occurs when
+   * the script attempts to use the Media Source Extensions API in a way that is
+   * no longer supported by the specification for the API. The usage that is
+   * problematic is when the script sets the duration attribute of a MediaSource
+   * object too low. The duration attribute of a MediaSource must be longer than
+   * the actual duration of any media (audio or video) already in the
+   * MediaSource. When set too low, the MediaSource must remove audio and video
+   * content that is beyond the time indicated by the new duration. Content
+   * removal that is caused by setting the duration attribute too low is no
+   * longer allowed by the specification. The message describes the minimum
+   * allowable duration value as the "highest presentation timestamp of any
+   * buffered coded frames" as a more precise way of describing the duration of
+   * content already in the MediaSource: "coded frames" are the specification's
+   * way of describing compressed audio frames or compressed video frames, and
+   * they each have a "presentation timestamp" that describes precisely when
+   * that frame's playback occurs in the overall media presentation. Early
+   * versions of the Media Source Extensions specification allowed this to
+   * happen, but standardization of the specification resulted in disallowing
+   * this behavior. The underlying issue leading to this specification change
+   * was that setting the duration attribute should be synchronous, but setting
+   * it lower than the timestamp of something currently buffered would cause
+   * confusing removal of media between that new duration and the previous,
+   * larger, duration. The script should instead explicitly remove that range of
+   * media first, before lowering the duration.
+   * See https://www.w3.org/TR/media-source-2/#dom-mediasource-duration and
+   * https://www.w3.org/TR/media-source-2/#dom-mediasource-duration for the
+   * currently specified behavior, which would throw an exception once support
+   * is removed for deprecated implicit asynchronous range removal when duration
+   * is truncated.
+   * See both https://github.com/w3c/media-source/issues/20 and
+   * https://github.com/w3c/media-source/issues/26 for the discussion that led
+   * to the specification change.
    */
   mediaSourceDurationTruncatingBuffered:
       'Setting `MediaSource.duration` below the highest presentation timestamp of any buffered coded frames is deprecated due to specification change. Support for implicit removal of truncated buffered media will be removed in the future. You should instead perform explicit `remove(newDuration, oldDuration)` on all `sourceBuffers`, where `newDuration < oldDuration`.',
   /**
-   * @description TODO(crbug.com/1320347): Description needed for translation
+   * @description This warning occurs when the browser requests Web MIDI access
+   *    as sysex (system exclusive messages) can be allowed via prompt even if
+   *    the browser did not specifically request it.
    */
   noSysexWebMIDIWithoutPermission:
       'Web MIDI will ask a permission to use even if the sysex is not specified in the `MIDIOptions`.',
@@ -177,7 +238,9 @@ const UIStrings = {
   notificationPermissionRequestedIframe:
       'Permission for the Notification API may no longer be requested from a cross-origin iframe. You should consider requesting permission from a top-level frame or opening a new window instead.',
   /**
-   * @description TODO(crbug.com/1318867): Description needed for translation
+   * @description This warning occurs when the WebRTC protocol attempts to
+   *    negotiate a connection using an obsolete cipher and risks connection
+   *    security.
    */
   obsoleteWebRtcCipherSuite:
       'Your partner is negotiating an obsolete (D)TLS version. Please check with your partner to have this fixed.',
@@ -186,6 +249,14 @@ const UIStrings = {
    */
   openWebDatabaseInsecureContext:
       'WebSQL in non-secure contexts is deprecated and will be removed soon. Please use Web Storage or Indexed Database.',
+  /**
+   * @description Warning displayed to developers when they use the PaymentInstruments API to let them know this API is deprecated.
+   */
+  paymentInstruments: '`paymentManager.instruments` is deprecated. Please use just-in-time install for payment handlers instead.',
+  /**
+   * @description Warning displayed to developers when their Web Payment API usage violates their Content-Security-Policy (CSP) connect-src directive to let them know this CSP bypass has been deprecated.
+   */
+  paymentRequestCSPViolation: 'Your `PaymentRequest` call bypassed Content-Security-Policy (CSP) `connect-src` directive. This bypass is deprecated. Please add the payment method identifier from the `PaymentRequest` API (in `supportedMethods` field) to your CSP `connect-src` directive.',
   /**
    * @description Warning displayed to developers when persistent storage type is used to notify that storage type is deprecated.
    */
@@ -216,7 +287,8 @@ const UIStrings = {
    */
   deprecatedWithReplacement: '{PH1} is deprecated. Please use {PH2} instead.',
   /**
-   * @description TODO(crbug.com/1320357): Description needed for translation
+   * @description This warning occurs when a subresource loaded by a page
+   *    has a URL with an authority portion. These are disallowed.
    */
   requestedSubresourceWithEmbeddedCredentials:
       'Subresource requests whose URLs contain embedded credentials (e.g. `https://user:pass@host/`) are blocked.',
@@ -311,6 +383,14 @@ const UIStrings = {
    */
   xrSupportsSession:
       '`supportsSession()` is deprecated. Please use `isSessionSupported()` and check the resolved boolean value instead.',
+  /**
+   * @description Warning displayed to developers that use overflow:visible
+   * for replaced elements. This declaration was earlier ignored but will now
+   * change the element's painting based on whether the overflow value allows
+   * the element to paint outside its bounds.
+   */
+  overflowVisibleOnReplacedElement:
+      'Specifying `overflow: visible` on img, video and canvas tags may cause them to produce visual content outside of the element bounds. See https://github.com/WICG/shared-element-transitions/blob/main/debugging_overflow_on_images.md.',
 };
 // clang-format on
 const str_ = i18n.i18n.registerUIStrings('models/issues_manager/DeprecationIssue.ts', UIStrings);
@@ -420,10 +500,6 @@ export class DeprecationIssue extends Issue {
         feature = 5436853517811712;
         milestone = 92;
         break;
-      case Protocol.Audits.DeprecationIssueType.LegacyConstraintGoogIPv6:
-        messageFunction = i18nLazyString(UIStrings.legacyConstraintGoogIPv6);
-        milestone = 103;
-        break;
       case Protocol.Audits.DeprecationIssueType.LocalCSSFileExtensionRejected:
         messageFunction = i18nLazyString(UIStrings.localCSSFileExtensionRejected);
         milestone = 64;
@@ -436,15 +512,6 @@ export class DeprecationIssue extends Issue {
         messageFunction = i18nLazyString(UIStrings.mediaSourceDurationTruncatingBuffered);
         feature = 6107495151960064;
         break;
-      case Protocol.Audits.DeprecationIssueType.NavigateEventRestoreScroll:
-        messageFunction = i18nLazyString(
-            UIStrings.deprecatedWithReplacement, {PH1: 'navigateEvent.restoreScroll()', PH2: 'navigateEvent.scroll()'});
-        break;
-      case Protocol.Audits.DeprecationIssueType.NavigateEventTransitionWhile:
-        messageFunction = i18nLazyString(
-            UIStrings.deprecatedWithReplacement,
-            {PH1: 'navigateEvent.transitionWhile()', PH2: 'navigateEvent.intercept()'});
-        break;
       case Protocol.Audits.DeprecationIssueType.NoSysexWebMIDIWithoutPermission:
         messageFunction = i18nLazyString(UIStrings.noSysexWebMIDIWithoutPermission);
         feature = 5138066234671104;
@@ -466,6 +533,14 @@ export class DeprecationIssue extends Issue {
         feature = 5175124599767040;
         milestone = 105;
         break;
+      case Protocol.Audits.DeprecationIssueType.PaymentInstruments:
+        messageFunction = i18nLazyString(UIStrings.paymentInstruments);
+        feature = 5099285054488576;
+        break;
+      case Protocol.Audits.DeprecationIssueType.PaymentRequestCSPViolation:
+        messageFunction = i18nLazyString(UIStrings.paymentRequestCSPViolation);
+        feature = 6286595631087616;
+        break;
       case Protocol.Audits.DeprecationIssueType.PersistentQuotaType:
         messageFunction = i18nLazyString(UIStrings.persistentQuotaType);
         feature = 5176235376246784;
@@ -523,6 +598,11 @@ export class DeprecationIssue extends Issue {
         messageFunction = i18nLazyString(UIStrings.requestedSubresourceWithEmbeddedCredentials);
         feature = 5669008342777856;
         break;
+      case Protocol.Audits.DeprecationIssueType.OverflowVisibleOnReplacedElement:
+        messageFunction = i18nLazyString(UIStrings.overflowVisibleOnReplacedElement);
+        feature = 5137515594383360;
+        milestone = 108;
+        break;
       case Protocol.Audits.DeprecationIssueType.RTCConstraintEnableDtlsSrtpFalse:
         messageFunction = i18nLazyString(UIStrings.rtcConstraintEnableDtlsSrtpFalse);
         milestone = 97;

package/front_end/models/issues_manager/FederatedAuthRequestIssue.ts

@@ -76,16 +76,6 @@ export class FederatedAuthRequestIssue extends Issue {
 }
 
 const issueDescriptions: Map<Protocol.Audits.FederatedAuthRequestIssueReason, LazyMarkdownIssueDescription> = new Map([
-  [
-    Protocol.Audits.FederatedAuthRequestIssueReason.ApprovalDeclined,
-    {
-      file: 'federatedAuthRequestApprovalDeclined.md',
-      links: [{
-        link: 'https://fedidcg.github.io/FedCM/',
-        linkTitle: i18nLazyString(UIStrings.fedCm),
-      }],
-    },
-  ],
   [
     Protocol.Audits.FederatedAuthRequestIssueReason.TooManyRequests,
     {

package/front_end/models/issues_manager/IssuesManager.ts

@@ -3,7 +3,6 @@
 // found in the LICENSE file.
 
 import * as Common from '../../core/common/common.js';
-import * as Root from '../../core/root/root.js';
 import * as SDK from '../../core/sdk/sdk.js';
 import * as Protocol from '../../generated/protocol.js';
 
@@ -187,9 +186,7 @@ export class IssuesManager extends Common.ObjectWrapper.ObjectWrapper<EventTypes
     // issueFilter uses the 'showThirdPartyIssues' setting. Clients of IssuesManager need
     // a full update when the setting changes to get an up-to-date issues list.
     this.showThirdPartyIssuesSetting?.addChangeListener(() => this.#updateFilteredIssues());
-    if (Root.Runtime.experiments.isEnabled('hideIssuesFeature')) {
-      this.hideIssueSetting?.addChangeListener(() => this.#updateFilteredIssues());
-    }
+    this.hideIssueSetting?.addChangeListener(() => this.#updateFilteredIssues());
   }
 
   static instance(opts: IssuesManagerCreationOptions = {
@@ -287,10 +284,7 @@ export class IssuesManager extends Common.ObjectWrapper.ObjectWrapper<EventTypes
         this.#issuesById.set(issueId, issue);
       }
       const values = this.hideIssueSetting?.get();
-      const hideIssuesFeature = Root.Runtime.experiments.isEnabled('hideIssuesFeature');
-      if (hideIssuesFeature) {
-        this.#updateIssueHiddenStatus(issue, values);
-      }
+      this.#updateIssueHiddenStatus(issue, values);
       if (issue.isHidden()) {
         this.#hiddenIssueCount.set(issue.getKind(), 1 + (this.#hiddenIssueCount.get(issue.getKind()) || 0));
       }
@@ -355,12 +349,9 @@ export class IssuesManager extends Common.ObjectWrapper.ObjectWrapper<EventTypes
     this.#issuesById.clear();
     this.#hiddenIssueCount.clear();
     const values = this.hideIssueSetting?.get();
-    const hideIssuesFeature = Root.Runtime.experiments.isEnabled('hideIssuesFeature');
     for (const [key, issue] of this.#allIssues) {
       if (this.#issueFilter(issue)) {
-        if (hideIssuesFeature) {
-          this.#updateIssueHiddenStatus(issue, values);
-        }
+        this.#updateIssueHiddenStatus(issue, values);
         this.#filteredIssues.set(key, issue);
         this.#issueCounts.set(issue.getKind(), 1 + (this.#issueCounts.get(issue.getKind()) ?? 0));
         if (issue.isHidden()) {

package/front_end/models/issues_manager/descriptions/arPermissionPolicyDisabled.md

@@ -1,9 +1,8 @@
-# Ensure that the `attribution-reporting` permission policy is enabled
+# The Attribution Reporting API can’t be used because Permissions Policy has been disabled
 
 This page tried to use the Attribution Reporting API but failed because the
-`attribution-reporting` permission policy is not enabled.
+`attribution-reporting` Permission Policy was explicitly disabled.
 
-This API is enabled by default in the top-level context and in same-origin
-child frames, but must be explicitly opted-in for cross-origin frames. Add the
-permission policy as follows:
-`<iframe src="..." allow="attribution-reporting">`.
+This API is currently enabled by default for top-level and cross-origin frames,
+but it is still possible for frames to have the permission disabled by their
+parent, e.g. with `<iframe src="…" allow="attribution-reporting 'none'">`.

package/front_end/models/issues_manager/descriptions/arPermissionPolicyNotDelegated.md

@@ -0,0 +1,11 @@
+# Ensure that the `attribution-reporting` Permissions Policy is explicitly enabled
+
+This page tried to use the Attribution Reporting API in a cross-origin frame
+that did not receive a specific opt-in via Permissions Policy from its parent
+frame.
+
+For the initial testing of the Attribution Reporting API, it is not required
+to opt-in cross-origin frames, but it will become necessary when the API
+matures. Add the permission policy as follows:
+`<iframe src="…" allow="attribution-reporting">`.
+