tomayac’s Twitter Archive—№ 20,566

@chriscoyier The allow value is a serialized permissions policy (w3c.github.io/webappsec-permissions-policy/#serialized-permissions-policy) whereas the sandbox value is an unordered set of unique space-separated tokens (html.spec.whatwg.org/multipage/common-microsyntaxes.html#unordered-set-of-unique-space-separated-tokens). So one is “complex”, the other “simple”.