diff --git a/spec/index.bs b/spec/index.bs
index 32ca41e..aa42175 100644
--- a/spec/index.bs
+++ b/spec/index.bs
@@ -1018,7 +1018,7 @@ Given a {{TrustedType}} type (|expectedType|), a [=realm/global object=] (|globa
1. If |input| has type |expectedType|, return stringified
|input| and abort these steps.
1. Let |requireTrustedTypes| be the result of executing [$Does sink type require trusted types?$] algorithm,
- passing |global|, and |sinkGroup|.
+ passing |global|, |sinkGroup|, and true.
1. If |requireTrustedTypes| is `false`, return stringified |input| and abort these steps.
1. Let |convertedInput| be the result of executing [$Process value with a default policy$] with the same arguments as this algorithm.
1. If the algorithm threw an error, rethrow the error and abort the following steps.
@@ -1411,11 +1411,10 @@ Content-Security-Policy: trusted-types one two default
### Does sink type require trusted types? ### {#does-sink-require-trusted-types}
-Given a [=realm/global object=] (|global|), a string (|sinkGroup|) this algorithm
-returns `true` if the [=injection sink=] requires a [=Trusted Type=], and
-`false` otherwise.
+Given a [=realm/global object=] (|global|), a string (|sinkGroup|) and a boolean (|includeReportOnly|) this algorithm
+returns `true` if the [=injection sink=] requires a [=Trusted Type=], and `false` otherwise.
-1. Let |result| be `false`.
+1. Let |result| be false.
1. For each |policy| in |global|'s CSP list:
1. If |policy|'s directive set does not contain a directive
whose [=directive/name=] is `"require-trusted-types-for"`, skip to the next |policy|.
@@ -1423,7 +1422,8 @@ returns `true` if the [=injection sink=] requires a [=Trusted Type=], and
is `"require-trusted-types-for"`
1. If |directive|'s [=directive/value=] does not contain a trusted-types-sink-group which is a match
for |sinkGroup|, skip to the next |policy|.
- 1. Set |result| to `true`.
+ 1. Let |enforced| be true if |policy|'s [=policy/disposition=] is `"enforce"`, and false otherwise.
+ 1. Set |result| to true if |enforced| is true, and set to |includeReportOnly| otherwise.
1. Return |result|.
### Should sink type mismatch violation be blocked by Content Security Policy? ### {#should-block-sink-type-mismatch}