Specify rate limiter for navigation, history traversal, and pushState/replaceState

source

@@ -2354,6 +2354,8 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute
      <li>The <dfn data-x-href="https://infra.spec.whatwg.org/#struct">struct</dfn> specification type and the associated definition for
              <dfn data-x="struct item" data-x-href="https://infra.spec.whatwg.org/#struct-item">item</dfn></li>
      <li>The <dfn data-x-href="https://infra.spec.whatwg.org/#byte-sequence">byte sequence</dfn> data structure</li>
+     <li>The <dfn data-x-href="https://infra.spec.whatwg.org/#allowed">allowed</dfn> and
+             <dfn data-x-href="https://infra.spec.whatwg.org/#blocked">blocked</dfn> singletons</li>
      <li>The <dfn data-x-href="https://infra.spec.whatwg.org/#forgiving-base64-encode">forgiving-base64 encode</dfn> and
              <dfn data-x-href="https://infra.spec.whatwg.org/#forgiving-base64-decode">forgiving-base64 decode</dfn> algorithms</li>
      <li><dfn data-x-href="https://infra.spec.whatwg.org/#the-exclusive-range">exclusive range</dfn></li>
@@ -99000,6 +99002,10 @@ interface <dfn interface>History</dfn> {
    <li><p>If <var>document</var> is not <span>fully active</span>, then throw a
    <span>"<code>SecurityError</code>"</span> <code>DOMException</code>.</p></li>
 
+   <li><p>If <var>history</var>'s <span>relevant global object</span>'s <span data-x="window
+   navigable">navigable</span>'s <span>allowed to perform a navigation or history update</span>
+   returns <span>blocked</span>, then return.</p></li>
+
    <li><p>If <var>delta</var> is 0, then <span>reload</span> <var>document</var>'s <span>node
    navigable</span>, and return.</p></li>
 
@@ -99037,11 +99043,6 @@ interface <dfn interface>History</dfn> {
    <li><p>If <var>document</var> is not <span>fully active</span>, then throw a
    <span>"<code>SecurityError</code>"</span> <code>DOMException</code>.</p></li>
 
-   <li><p>Optionally, throw a <span>"<code>SecurityError</code>"</span> <code>DOMException</code>.
-   (For example, the user agent might disallow calls to these methods that are invoked on a timer,
-   or from event listeners that are not triggered in response to a clear user action, or that are
-   invoked in rapid succession.)</p></li>
-
    <li><p>Let <var>serializedData</var> be
    <span>StructuredSerializeForStorage</span>(<var>data</var>). Rethrow any exceptions.</p></li>
 
@@ -99070,6 +99071,10 @@ interface <dfn interface>History</dfn> {
     data-x="">history.pushState(null, "", "")</code> (which bypasses it).</p>
    </li>
 
+   <li><p>If <var>history</var>'s <span>relevant global object</span>'s <span data-x="window
+   navigable">navigable</span>'s <span>allowed to perform a navigation or history update</span>
+   returns <span>blocked</span>, then return.</p></li>
+
    <li><p>Let <var>navigation</var> be <var>history</var>'s <span>relevant global object</span>'s
    <span data-x="window-navigation-api">navigation API</span>.</p></li>
 
@@ -104282,6 +104287,16 @@ interface <dfn interface>NotRestoredReasons</dfn> {
 
     <p class="note">This is only ever set to true in cases where the navigable's <span
     data-x="nav-parent">parent</span> is non-null.</p>
+   </li>
+
+   <li>
+    <p>An <dfn>allowed to perform a navigation or history update</dfn> algorithm, which is
+    <span>implementation-defined</span> and returns either <span>allowed</span> or
+    <span>blocked</span>.</p>
+
+    <p class="note">For example, this can return <span>blocked</span> if invoked too many times
+    times within a certain timespan.</p>
+   </li>
   </ul>
 
   <p>The <span data-x="nav-current-history-entry">current session history entry</span> and the
@@ -107474,6 +107489,14 @@ location.href = '#foo';</code></pre>
    intersection-observing a lazy loading element</span> <var>container</var> and set
    <var>container</var>'s <span>lazy load resumption steps</span> to null.</p></li>
 
+   <li><p>If <var>navigable</var>'s <span>allowed to perform a navigation or history update</span>
+   returns <span>blocked</span>, then invoke <span>WebDriver BiDi navigation failed</span> with
+   <var>navigable</var> and a <span>WebDriver BiDi navigation status</span> whose <span
+   data-x="navigation-status-id">id</span> is <var>navigationId</var>, <span
+   data-x="navigation-status-status">status</span> is "<code
+   data-x="navigation-status-canceled">canceled</code>", and <span
+   data-x="navigation-status-url">url</span> is <var>url</var>, and return.</p></li>
+
    <li id="navigate-convert-to-replace">
     <p>If <var>historyHandling</var> is "<code
     data-x="NavigationHistoryBehavior-auto">auto</code>":</p>