From f8e5bf77287b6d8712b054e6651472b7babeeb38 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Philip=20J=C3=A4genstedt?= <philip@foolip.org>
Date: Tue, 9 Jun 2026 17:22:16 +0200
Subject: [PATCH] Define privacy-preserving rendering

---
 source | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/source b/source
index 640465da59f..79ff011c402 100644
--- a/source
+++ b/source
@@ -151602,6 +151602,9 @@ legend[align=right i] {
   <code>video</code> element, as defined by the relevant rendering rules; for WebVTT, those are the
   <span>rules for updating the display of WebVTT text tracks</span>. <ref>WEBVTT</ref></p>
 
+  <p>In <span>privacy-preserving rendering</span>, subtitles and captions are <span>expected</span>
+  to be rendered with default appearance that ignores any user preferences.</p>
+
   <p>When the user agent starts <span data-x="expose a user interface to the user">exposing a user
   interface</span> for a <code>video</code> element, the user agent should run the <span>rules for
   updating the text track rendering</span> of each of the <span data-x="text track">text
@@ -153312,6 +153315,10 @@ select {
   elements in their user interface, as discussed <a
   href="#providing-users-with-a-means-to-follow-hyperlinks-created-using-the-link-element">previously</a>.</p>
 
+  <p>In <span>privacy-preserving rendering</span>, user agents are <span>expected</span> to act as
+  if the <code data-x="selector-visited">:visited</code> <span>pseudo-class</span> does not
+  match.</p>
+
 
 
 
@@ -153550,6 +153557,35 @@ if (s = prompt('What is your name?')) {
 
 
 
+  <h3>Privacy-preserving rendering</h3>
+
+  <p>In <dfn export>privacy-preserving rendering</dfn>, any security- or privacy-sensitive
+  information that isn't otherwise observable to author code are omitted or replaced with safe
+  defaults. The detailed requirements are in the relevant sections above.</p>
+
+  <p>In <span>privacy-preserving rendering</span>, the user agent is expected to:</p>
+
+  <h4>Summary</h4>
+
+  <!-- NON-NORMATIVE SECTION -->
+
+  <p>The following table summarizes how <span>privacy-preserving rendering</span> affects various
+  elements and features when they are rendered:</p>
+
+  <table>
+   <thead>
+    <tr>
+     <th>Category
+     <th>Expected behavior
+   <tbody>
+    <tr>
+     <td><code>a</code> and <code>area</code> elements
+     <td>The <code data-x="selector-visited">:visited</code> <span>pseudo-class</span> never matches.
+    <tr>
+     <td><span data-x="media element">Media elements</span>
+     <td>Subtitles and captionss use default appearance, ignoring any user preferences.
+  </table>
+
 
   <h2 split-filename="obsolete" id="obsolete">Obsolete features</h2>