privsec section

privsec-section linting rule

Default: false (but on by default for W3C specs via respecConfig.lint)

Warns when the document is missing a Privacy and/or Security Considerations section. Required for W3C specifications that contain normative content.

How to add the section

<section>
  <h2>Privacy and Security Considerations</h2>
  <p>This specification introduces no new privacy or security concerns
  beyond those described in [[FETCH]].</p>
</section>

How to enable

var respecConfig = {
  lint: { "privsec-section": true },
};

How to disable

var respecConfig = {
  lint: { "privsec-section": false },
};

Notes

• The section should have an <h2> titled "Privacy and Security Considerations" or similar
• Even for low-risk APIs, a brief section explaining why there are no concerns is good practice
• See the Security and Privacy Questionnaire for guidance on what to include