-
Notifications
You must be signed in to change notification settings - Fork 27
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
SHA: f32348b Reason: push, by @sideshowbarker Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
- Loading branch information
1 parent
7a7d9dc
commit d973f75
Showing
1 changed file
with
247 additions
and
21 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -3,12 +3,12 @@ | |
<meta content="text/html; charset=utf-8" http-equiv="Content-Type"> | ||
<meta content="width=device-width, initial-scale=1, shrink-to-fit=no" name="viewport"> | ||
<title>A Well-Known URL for Changing Passwords</title> | ||
<meta content="WD" name="w3c-status"> | ||
<link href="https://www.w3.org/StyleSheets/TR/2021/W3C-WD" rel="stylesheet"> | ||
<meta content="ED" name="w3c-status"> | ||
<link href="https://www.w3.org/StyleSheets/TR/2021/W3C-ED" rel="stylesheet"> | ||
<link href="https://www.w3.org/2008/site/images/favicon.ico" rel="icon"> | ||
<meta content="Bikeshed version 44af0bf3e, updated Fri Jul 29 17:05:16 2022 -0700" name="generator"> | ||
<link href="https://www.w3.org/TR/change-password-url/" rel="canonical"> | ||
<meta content="bb466c2d4a53444e0fb7cb8dda7cea1bb9d565bb" name="document-revision"> | ||
<meta content="f32348b52f9437f7d2302b6a9d68ccf46dd52527" name="document-revision"> | ||
<style>/* style-autolinks */ | ||
|
||
.css.css, .property.property, .descriptor.descriptor { | ||
|
@@ -71,6 +71,115 @@ | |
[data-link-type=biblio] { | ||
white-space: pre; | ||
}</style> | ||
<style>/* style-colors */ | ||
|
||
/* Any --*-text not paired with a --*-bg is assumed to have a transparent bg */ | ||
:root { | ||
color-scheme: light dark; | ||
|
||
--text: black; | ||
--bg: white; | ||
|
||
--unofficial-watermark: url(https://www.w3.org/StyleSheets/TR/2016/logos/UD-watermark); | ||
|
||
--logo-bg: #1a5e9a; | ||
--logo-active-bg: #c00; | ||
--logo-text: white; | ||
|
||
--tocnav-normal-text: #707070; | ||
--tocnav-normal-bg: var(--bg); | ||
--tocnav-hover-text: var(--tocnav-normal-text); | ||
--tocnav-hover-bg: #f8f8f8; | ||
--tocnav-active-text: #c00; | ||
--tocnav-active-bg: var(--tocnav-normal-bg); | ||
|
||
--tocsidebar-text: var(--text); | ||
--tocsidebar-bg: #f7f8f9; | ||
--tocsidebar-shadow: rgba(0,0,0,.1); | ||
--tocsidebar-heading-text: hsla(203,20%,40%,.7); | ||
|
||
--toclink-text: var(--text); | ||
--toclink-underline: #3980b5; | ||
--toclink-visited-text: var(--toclink-text); | ||
--toclink-visited-underline: #054572; | ||
|
||
--heading-text: #005a9c; | ||
|
||
--hr-text: var(--text); | ||
|
||
--algo-border: #def; | ||
|
||
--del-text: red; | ||
--del-bg: transparent; | ||
--ins-text: #080; | ||
--ins-bg: transparent; | ||
|
||
--a-normal-text: #034575; | ||
--a-normal-underline: #bbb; | ||
--a-visited-text: var(--a-normal-text); | ||
--a-visited-underline: #707070; | ||
--a-hover-bg: rgba(75%, 75%, 75%, .25); | ||
--a-active-text: #c00; | ||
--a-active-underline: #c00; | ||
|
||
--blockquote-border: silver; | ||
--blockquote-bg: transparent; | ||
--blockquote-text: currentcolor; | ||
|
||
--issue-border: #e05252; | ||
--issue-bg: #fbe9e9; | ||
--issue-text: var(--text); | ||
--issueheading-text: #831616; | ||
|
||
--example-border: #e0cb52; | ||
--example-bg: #fcfaee; | ||
--example-text: var(--text); | ||
--exampleheading-text: #574b0f; | ||
|
||
--note-border: #52e052; | ||
--note-bg: #e9fbe9; | ||
--note-text: var(--text); | ||
--noteheading-text: hsl(120, 70%, 30%); | ||
--notesummary-underline: silver; | ||
|
||
--assertion-border: #aaa; | ||
--assertion-bg: #eee; | ||
--assertion-text: black; | ||
|
||
--advisement-border: orange; | ||
--advisement-bg: #fec; | ||
--advisement-text: var(--text); | ||
--advisementheading-text: #b35f00; | ||
|
||
--warning-border: red; | ||
--warning-bg: hsla(40,100%,50%,0.95); | ||
--warning-text: var(--text); | ||
|
||
--amendment-border: #330099; | ||
--amendment-bg: #F5F0FF; | ||
--amendment-text: var(--text); | ||
--amendmentheading-text: #220066; | ||
|
||
--def-border: #8ccbf2; | ||
--def-bg: #def; | ||
--def-text: var(--text); | ||
--defrow-border: #bbd7e9; | ||
|
||
--datacell-border: silver; | ||
|
||
--indexinfo-text: #707070; | ||
|
||
--indextable-hover-text: black; | ||
--indextable-hover-bg: #f7f8f9; | ||
|
||
--outdatedspec-bg: rgba(0, 0, 0, .5); | ||
--outdatedspec-text: black; | ||
--outdated-bg: maroon; | ||
--outdated-text: white; | ||
--outdated-shadow: red; | ||
|
||
--editedrec-bg: darkorange; | ||
}</style> | ||
<style>/* style-counters */ | ||
|
||
body { | ||
|
@@ -213,23 +322,146 @@ | |
.heading > a.self-link::before { content: "§"; } | ||
dfn > a.self-link::before { content: "#"; } | ||
</style> | ||
<style>/* style-darkmode */ | ||
|
||
@media (prefers-color-scheme: dark) { | ||
:root { | ||
--text: #ddd; | ||
--bg: black; | ||
|
||
--unofficial-watermark: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='400' height='400'%3E%3Cg fill='%23100808' transform='translate(200 200) rotate(-45) translate(-200 -200)' stroke='%23100808' stroke-width='3'%3E%3Ctext x='50%25' y='220' style='font: bold 70px sans-serif; text-anchor: middle; letter-spacing: 6px;'%3EUNOFFICIAL%3C/text%3E%3Ctext x='50%25' y='305' style='font: bold 70px sans-serif; text-anchor: middle; letter-spacing: 6px;'%3EDRAFT%3C/text%3E%3C/g%3E%3C/svg%3E"); | ||
|
||
--logo-bg: #1a5e9a; | ||
--logo-active-bg: #c00; | ||
--logo-text: white; | ||
|
||
--tocnav-normal-text: #999; | ||
--tocnav-normal-bg: var(--bg); | ||
--tocnav-hover-text: var(--tocnav-normal-text); | ||
--tocnav-hover-bg: #080808; | ||
--tocnav-active-text: #f44; | ||
--tocnav-active-bg: var(--tocnav-normal-bg); | ||
|
||
--tocsidebar-text: var(--text); | ||
--tocsidebar-bg: #080808; | ||
--tocsidebar-shadow: rgba(255,255,255,.1); | ||
--tocsidebar-heading-text: hsla(203,20%,40%,.7); | ||
|
||
--toclink-text: var(--text); | ||
--toclink-underline: #6af; | ||
--toclink-visited-text: var(--toclink-text); | ||
--toclink-visited-underline: #054572; | ||
|
||
--heading-text: #8af; | ||
|
||
--hr-text: var(--text); | ||
|
||
--algo-border: #456; | ||
|
||
--del-text: #f44; | ||
--del-bg: transparent; | ||
--ins-text: #4a4; | ||
--ins-bg: transparent; | ||
|
||
--a-normal-text: #6af; | ||
--a-normal-underline: #555; | ||
--a-visited-text: var(--a-normal-text); | ||
--a-visited-underline: var(--a-normal-underline); | ||
--a-hover-bg: rgba(25%, 25%, 25%, .2); | ||
--a-active-text: #f44; | ||
--a-active-underline: var(--a-active-text); | ||
|
||
--borderedblock-bg: rgba(255, 255, 255, .05); | ||
|
||
--blockquote-border: silver; | ||
--blockquote-bg: var(--borderedblock-bg); | ||
--blockquote-text: currentcolor; | ||
|
||
--issue-border: #e05252; | ||
--issue-bg: var(--borderedblock-bg); | ||
--issue-text: var(--text); | ||
--issueheading-text: hsl(0deg, 70%, 70%); | ||
|
||
--example-border: hsl(50deg, 90%, 60%); | ||
--example-bg: var(--borderedblock-bg); | ||
--example-text: var(--text); | ||
--exampleheading-text: hsl(50deg, 70%, 70%); | ||
|
||
--note-border: hsl(120deg, 100%, 35%); | ||
--note-bg: var(--borderedblock-bg); | ||
--note-text: var(--text); | ||
--noteheading-text: hsl(120, 70%, 70%); | ||
--notesummary-underline: silver; | ||
|
||
--assertion-border: #444; | ||
--assertion-bg: var(--borderedblock-bg); | ||
--assertion-text: var(--text); | ||
|
||
--advisement-border: orange; | ||
--advisement-bg: #222218; | ||
--advisement-text: var(--text); | ||
--advisementheading-text: #f84; | ||
|
||
--warning-border: red; | ||
--warning-bg: hsla(40,100%,20%,0.95); | ||
--warning-text: var(--text); | ||
|
||
--amendment-border: #330099; | ||
--amendment-bg: #080010; | ||
--amendment-text: var(--text); | ||
--amendmentheading-text: #cc00ff; | ||
|
||
--def-border: #8ccbf2; | ||
--def-bg: #080818; | ||
--def-text: var(--text); | ||
--defrow-border: #136; | ||
|
||
--datacell-border: silver; | ||
|
||
--indexinfo-text: #aaa; | ||
|
||
--indextable-hover-text: var(--text); | ||
--indextable-hover-bg: #181818; | ||
|
||
--outdatedspec-bg: rgba(255, 255, 255, .5); | ||
--outdatedspec-text: black; | ||
--outdated-bg: maroon; | ||
--outdated-text: white; | ||
--outdated-shadow: red; | ||
|
||
--editedrec-bg: darkorange; | ||
} | ||
/* In case a transparent-bg image doesn't expect to be on a dark bg, | ||
which is quite common in practice... */ | ||
img { background: white; } | ||
} | ||
@media (prefers-color-scheme: dark) { | ||
:root { | ||
--selflink-text: black; | ||
--selflink-bg: silver; | ||
--selflink-hover-text: white; | ||
} | ||
} | ||
|
||
@media (prefers-color-scheme: dark) { | ||
:root { | ||
--dfnpanel-bg: #222; | ||
--dfnpanel-text: var(--text); | ||
} | ||
}</style> | ||
<body class="h-entry"> | ||
<div class="head"> | ||
<p data-fill-with="logo"><a class="logo" href="https://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/StyleSheets/TR/2021/logos/W3C" width="72"> </a> </p> | ||
<h1 class="p-name no-ref" id="title">A Well-Known URL for Changing Passwords</h1> | ||
<p id="w3c-state"><a href="https://www.w3.org/standards/types#FPWD">W3C First Public Working Draft</a>, <time class="dt-updated" datetime="2022-09-23">23 September 2022</time></p> | ||
<p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">Editor’s Draft</a>, <time class="dt-updated" datetime="2022-09-23">23 September 2022</time></p> | ||
<details open> | ||
<summary>More details about this document</summary> | ||
<div data-fill-with="spec-metadata"> | ||
<dl> | ||
<dt>This version: | ||
<dd><a class="u-url" href="https://www.w3.org/TR/2022/WD-change-password-url-20220923/">https://www.w3.org/TR/2022/WD-change-password-url-20220923/</a> | ||
<dd><a class="u-url" href="https://w3c.github.io/webappsec-change-password-url/">https://w3c.github.io/webappsec-change-password-url/</a> | ||
<dt>Latest published version: | ||
<dd><a href="https://www.w3.org/TR/change-password-url/">https://www.w3.org/TR/change-password-url/</a> | ||
<dt>Editor's Draft: | ||
<dd><a href="https://w3c.github.io/webappsec-change-password-url/">https://w3c.github.io/webappsec-change-password-url/</a> | ||
<dt>History: | ||
<dd><a class="u-url" href="https://www.w3.org/standards/history/change-password-url">https://www.w3.org/standards/history/change-password-url</a> | ||
<dt>Feedback: | ||
<dd><span><a href="mailto:[email protected]?subject=%5Bchange-password-url%5D%20YOUR%20TOPIC%20HERE">[email protected]</a> with subject line “<kbd>[change-password-url] <i data-lt>… message topic …</i></kbd>” (<a href="https://lists.w3.org/Archives/Public/public-webappsec/" rel="discussion">archives</a>)</span> | ||
<dd><a href="https://github.com/w3c/webappsec-change-password-url/issues/">GitHub</a> | ||
|
@@ -254,23 +486,17 @@ <h2 class="no-num no-toc no-ref heading settled" id="abstract"><span class="cont | |
</div> | ||
<h2 class="no-num no-toc no-ref heading settled" id="sotd"><span class="content">Status of this document</span></h2> | ||
<div data-fill-with="status"> | ||
<p> <em>This section describes the status of this document at the time of | ||
its publication. A list of | ||
current W3C publications and the latest revision of this technical report | ||
can be found in the <a href="https://www.w3.org/TR/">W3C technical reports | ||
index at https://www.w3.org/TR/.</a></em> </p> | ||
<p> This document was published by the <a href="https://www.w3.org/groups/wg/webappsec">Web Application Security Working Group</a> as a Working Draft using the <a href="https://www.w3.org/2021/Process-20211102/#recs-and-notes">Recommendation | ||
track</a>. This document is intended to become a W3C Recommendation. </p> | ||
<p> This is a public copy of the editors’ draft. | ||
It is provided for discussion only and may change at any moment. | ||
Its publication here does not imply endorsement of its contents by W3C. | ||
Don’t cite this document other than as work in progress. </p> | ||
<p> <strong>Changes to this document may be tracked at <a href="https://github.com/w3c/webappsec">https://github.com/w3c/webappsec</a>.</strong> </p> | ||
<p> The (<a href="https://lists.w3.org/Archives/Public/public-webappsec/">archived</a>) public mailing list <a href="mailto:[email protected]?Subject=%5Bchange-password-url%5D%20PUT%20SUBJECT%20HERE">[email protected]</a> (see <a href="https://www.w3.org/Mail/Request">instructions</a>) | ||
is preferred for discussion of this specification. | ||
When sending e-mail, | ||
please put the text “change-password-url” in the subject, | ||
preferably like this: | ||
“[change-password-url] <em>…summary of comment…</em>” </p> | ||
<p> This document is a <strong>First Public Working Draft</strong>. </p> | ||
<p> Publication as a First Public Working Draft does not imply endorsement by <abbr title="World Wide Web Consortium">W3C</abbr> and its Members. This is a draft document and may be updated, replaced or | ||
obsoleted by other documents at any time. It is inappropriate to cite this | ||
document as other than work in progress. </p> | ||
<p> This document was produced by the <a href="https://www.w3.org/groups/wg/webappsec">Web Application Security Working Group</a>. </p> | ||
<p> This document was produced by a group operating under | ||
the <a href="https://www.w3.org/Consortium/Patent-Policy/">W3C Patent Policy</a>. | ||
|
@@ -633,7 +859,7 @@ <h3 class="no-num no-ref heading settled" id="normative"><span class="content">N | |
<dt id="biblio-rfc7231">[RFC7231] | ||
<dd>R. Fielding, Ed.; J. Reschke, Ed.. <a href="https://httpwg.org/specs/rfc7231.html"><cite>Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content</cite></a>. June 2014. Proposed Standard. URL: <a href="https://httpwg.org/specs/rfc7231.html">https://httpwg.org/specs/rfc7231.html</a> | ||
<dt id="biblio-secure-contexts">[SECURE-CONTEXTS] | ||
<dd>Mike West. <a href="https://www.w3.org/TR/secure-contexts/"><cite>Secure Contexts</cite></a>. 18 September 2021. CR. URL: <a href="https://www.w3.org/TR/secure-contexts/">https://www.w3.org/TR/secure-contexts/</a> | ||
<dd>Mike West. <a href="https://w3c.github.io/webappsec-secure-contexts/"><cite>Secure Contexts</cite></a>. URL: <a href="https://w3c.github.io/webappsec-secure-contexts/">https://w3c.github.io/webappsec-secure-contexts/</a> | ||
<dt id="biblio-url">[URL] | ||
<dd>Anne van Kesteren. <a href="https://url.spec.whatwg.org/"><cite>URL Standard</cite></a>. Living Standard. URL: <a href="https://url.spec.whatwg.org/">https://url.spec.whatwg.org/</a> | ||
<dt id="biblio-well-known">[WELL-KNOWN] | ||
|