fixed section numbering issue and reference to obsolete frame-options directive
--- a/user-interface-safety.html Tue Mar 18 00:12:08 2014 +0000
+++ b/user-interface-safety.html Thu Apr 17 22:52:29 2014 +0000
@@ -280,8 +280,6 @@
this specification. </p>
-</section>
-
<section id="input-protection">
<h3><code>input-protection</code></h3>
@@ -938,7 +936,7 @@
<pre class="example" title="Policy Header">Content-Security-Policy-Report-Only: input-protection</pre>
<p>A resource wants to allow itself to be embedded by <strong>ancestors</strong> that are same-origin or from the origin <code>https://checkout.example.com</code>, but also to have the <code>unsafe</code> attribute set on events that violate the <code>input protection</code> heuristic.</p>
-<pre class="example" title="Policy Header">Content-Security-Policy: frame-options 'self' https://checkout.example.com
+<pre class="example" title="Policy Header">Content-Security-Policy: frame-ancestors 'self' https://checkout.example.com
Content-Security-Policy-Report-Only: input-protection </pre>
</section>