Security self-review #159

Sub-task of #138

Complete [Self-Review Questionnaire: Security and Privacy](https://www.w3.org/TR/security-privacy-questionnaire/)

Request review for a WD that is moving to CR soon

• What and when is your next expected transition?

Candidate Recommendation, currently in wide review process

• What has changed since any previous review?

n/a

• Please point to the results of your own self-review (see https://w3ctag.github.io/security-questionnaire/)

I will do

• Where and how to file issues arising?

GitHub issues

• Pointer to any explainer for the spec?

Link to our explainer