Skip to content

Technical review: Document ch-ua-high-entropy-values permissions-policy#42880

Merged
hamishwillee merged 7 commits intomdn:mainfrom
chrisdavidmills:ch-ua-high-entropy-values-policy
Jan 26, 2026
Merged

Technical review: Document ch-ua-high-entropy-values permissions-policy#42880
hamishwillee merged 7 commits intomdn:mainfrom
chrisdavidmills:ch-ua-high-entropy-values-policy

Conversation

@chrisdavidmills
Copy link
Copy Markdown
Contributor

Description

Chrome 144 adds support for the ch-ua-high-entropy-values Permissions-Policy directive. See https://chromestatus.com/feature/6176703867781120.

This PR adds a ref doc for the new directive, plus mentions in appropriate places.

@miketaylr, can I get your review on this one?

This PR also runs into this issue again, but I'm still not sure documenting those 22 individual policies is top priority. I can do it if you think it's important, but again, in a different PR.

Motivation

Additional details

Related issues and pull requests

@chrisdavidmills chrisdavidmills requested review from a team as code owners January 23, 2026 12:37
@chrisdavidmills chrisdavidmills requested review from hamishwillee and removed request for a team January 23, 2026 12:37
@github-actions github-actions bot added Content:WebAPI Web API docs Content:HTTP HTTP docs size/m [PR only] 51-500 LoC changed labels Jan 23, 2026
@chrisdavidmills chrisdavidmills changed the title Document ch-ua-high-entropy-values permissions-policy Technical review: Document ch-ua-high-entropy-values permissions-policy Jan 23, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Jan 23, 2026

The default allowlist for `ch-ua-high-entropy-values` is `*`, which permits any content within the current document and all nested browsing contexts to use `getHighEntropyValues()`.

> [!NOTE]
> Access to individual high-entropy features can be controlled with their own [individual permissions policies](https://wicg.github.io/client-hints-infrastructure/#policy-controlled-features).
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, I still have to create something to catch these cases as discussed in #41648 (comment). Good enough for now.

…riginate

Updated the description of the getHighEntropyValues() method to clarify its functionality and the types of values it returns.
{{APIRef("User-Agent Client Hints API")}}{{SeeCompatTable}}{{AvailableInWorkers}}

The **`getHighEntropyValues()`** method of the {{domxref("NavigatorUAData")}} interface is a {{jsxref("Promise")}} that resolves with a dictionary object containing the _high entropy_ values the user-agent returns.
The **`getHighEntropyValues()`** method of the {{domxref("NavigatorUAData")}} interface returns a {{jsxref("Promise")}} that resolves with a dictionary object containing information about the browser (user agent).
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@chrisdavidmills I have rewritten the intro and minor parts below in 6e1bf42

Up front it wasn't clear that this returns the low entropy hints and some subset of the high entropy hints. That resulted in some confusion when you see that the parameters and return values don't match.

I have addressed that to my taste. Happy for you to modify as you wish, as long as that is clear ^^^. Either way, the changes I made now need review :-)

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sure thing, thanks for the attention you've given this. The text was mostly fine, but I've made a few teaks. Most significantly, I updated the intro sentence to be more specific about what info it returns. In isolation, it was a bit vague; I'm thinking about people reading that intro sentence elsewhere, or just skimming the page.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let me know what you think, anyway.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it is much better from your changes. I did a minor tweak/typo fix.

Copy link
Copy Markdown

@miketaylr miketaylr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks Chris!

Copy link
Copy Markdown
Collaborator

@hamishwillee hamishwillee left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @chrisdavidmills (and @miketaylr ). Looks good to me!

@hamishwillee hamishwillee merged commit 2dcdbed into mdn:main Jan 26, 2026
8 checks passed
@chrisdavidmills chrisdavidmills deleted the ch-ua-high-entropy-values-policy branch January 27, 2026 08:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Content:HTTP HTTP docs Content:WebAPI Web API docs size/m [PR only] 51-500 LoC changed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants