Fix some syntax error in sample code

Author: LiangTheDev

specs/AdditionalAllowedFrameAncestors.md

@@ -29,16 +29,16 @@ const std::wstring siteToEmbed = L"https://www.microsoft.com/";
 bool AreSitesSame(PCWSTR url1, PCWSTR url2)
 {
     wil::com_ptr<IUri> uri1;
-    CHECK_FAILURE(CreateUri(url1.c_str(), Uri_CREATE_CANONICALIZE, 0, &uri1));
-    DWORD scheme1 = URL_SCHEME_INVALID;
+    CHECK_FAILURE(CreateUri(url1, Uri_CREATE_CANONICALIZE, 0, &uri1));
+    DWORD scheme1 = -1;
     DWORD port1 = 0;
     wil::unique_bstr host1;
     CHECK_FAILURE(uri1->GetScheme(&scheme1));
     CHECK_FAILURE(uri1->GetHost(&host1));
     CHECK_FAILURE(uri1->GetPort(&port1));
     wil::com_ptr<IUri> uri2;
-    CHECK_FAILURE(CreateUri(url2.c_str(), Uri_CREATE_CANONICALIZE, 0, &uri2));
-    DWORD scheme2 = URL_SCHEME_INVALID;
+    CHECK_FAILURE(CreateUri(url2, Uri_CREATE_CANONICALIZE, 0, &uri2));
+    DWORD scheme2 = -1;
     DWORD port2 = 0;
     wil::unique_bstr host2;
     CHECK_FAILURE(uri2->GetScheme(&scheme2));
@@ -50,13 +50,13 @@ bool AreSitesSame(PCWSTR url1, PCWSTR url2)
 // App specific logic to decide whether the page is fully trusted.
 bool IsAppContentUri(PCWSTR pageUrl)
 {
-    return AreSitesSame(pageUrl, myTrustedSite);
+    return AreSitesSame(pageUrl, myTrustedSite.c_str());
 }
 
 // App specific logic to decide whether a site is the one it wants to embed.
 bool IsTargetSite(PCWSTR siteUrl)
 {
-    return AreSitesSame(siteUrl, siteToEmbed);
+    return AreSitesSame(siteUrl, siteToEmbed.c_str());
 }
 
 void MyApp::HandleEmbeddedSites()
@@ -125,10 +125,12 @@ void MyApp::HandleEmbeddedSites()
                       ICoreWebView2NavigationStartingEventArgs2>
                       navigationStartArgs;
                     if (SUCCEEDED(args->QueryInterface(
-                          IID_PPV_ARGS(&navigationStartArgs)))
-                      navigationStartArgs
+                          IID_PPV_ARGS(&navigationStartArgs))))
+                      {
+                        navigationStartArgs
                           ->put_AdditionalAllowedFrameAncestors(
-                              myTrustedSite);
+                              myTrustedSite.c_str());
+                      }
                   }
               }
               return S_OK;
@@ -205,16 +207,16 @@ interface ICoreWebView2NavigationStartingEventArgs_2 : ICoreWebView2NavigationSt
   /// Get additional allowed frame ancestors set by the app.
   [propget] HRESULT AdditionalAllowedFrameAncestors([out, retval] LPWSTR* value);
 
-  /// The app may set this property to allow a frame to be embedded by certain additional ancestors besides what is allowed by
+  /// The app may set this property to allow a frame to be embedded by additional ancestors besides what is allowed by
   /// http header [X-Frame-Options](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options)
   /// and [Content-Security-Policy frame-ancestors directive](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors).
   /// If set, a frame ancestor is allowed if it is allowed by the additional allowed frame
   /// ancestoers or original http header from the site.
   /// Whether an ancestor is allowed by the additional allowed frame ancestoers is done the same way as if the site provided
   /// it as the source list of the Content-Security-Policy frame-ancestors directive.
   /// For example, if `https://example.com` and `https://www.example.com` are the origins of the top
-  /// page and intemediate iframes that embed a nested site embedding iframe, and you fully trust
-  /// those origins, you should set thus property to `https://example.com https://www.example.com`.
+  /// page and intemediate iframes that embed a nested site-embedding iframe, and you fully trust
+  /// those origins, you should set this property to `https://example.com https://www.example.com`.
   /// This property gives the app the ability to use iframe to embed sites that otherwise
   /// could not be embedded in an iframe in trusted app pages.
   /// This could potentially subject the embedded sites to [Clickjacking](https://en.wikipedia.org/wiki/Clickjacking)