allowlist/'self'=], which means third-party contexts are not [=allowed

to use=] the API by default.

</p>

<p>

Developers can use the means afforded by the [[[permissions-policy]]]

specification to control if and when a third-party context is [=allowed

<p>

Although user agents are unified in preventing the Web Share API from

being used in third-party context, at the time of publication there

enable the API in third-party contexts. In particular, although

the[^iframe/allow^] attribute is widely supported, the updated syntax

for the [^iframe/allow^] attribute is not. Similarly, the

[[[Permissions-Policy]]] specification before relying on it to enable

the Web Share API in third-party contexts.

</p>

</aside>

</section>

<section class="informative" id="a11y">