Editorial: fix xref default allow list

Author: marcoscaceres

index.html

@@ -205,8 +205,9 @@ 
         Enabling the API in third-party contexts
       h3>
       <p data-cite="permissions-policy">
-        The [=default allowlist=] of [=default allowlist/'self'=] makes Web
-        Share API available by default only in first-party contexts.
+        The [=policy-controlled feature/default allowlist=] of [=default
+        allowlist/'self'=] makes Web Share API available by default only in
+        first-party contexts.
       p>
       <p>
         Third-party can be allowed to use this API via an [^iframe^]'s
@@ -685,8 +686,9 @@ 
       <p>
         This specification defines a policy-controlled permission identified by
         the string <code><dfn class="permission">"web-share"dfn>code>. Its
-        [=default allowlist=] is [=default allowlist/'self'=], which means
-        third-party contexts are not [=allowed to use=] the API by default.
+        [=policy-controlled feature/default allowlist=] is [=default
+        allowlist/'self'=], which means third-party contexts are not [=allowed
+        to use=] the API by default.
       p>
       <p>
         Developers can use the means afforded by the [[[permissions-policy]]]