>Define where "initial page load and rendering" ends for a single-page web application It's not hugely important. It could be DOMContentLoaded + x seconds. It

>Define where "initial page load and rendering" ends for a single-page web application It's not hugely important. It could be DOMContentLoaded + x seconds. It could be onload unless it doesn't fire within a reasonable amount of time. As long as the browser starts throttling within seconds I don't care much about the details. Login is not a concept I find relevant in this context. >Also, how does one control what set of pages a given permission applies to? It should apply on a per-domain basis. That may be too coarse in some cases but nothing is perfect. Let's go for good enough.