W3C home > Mailing lists > Public > public-media-capture@w3.org > February 2016

Re: [mediacapture-main] Pull Request: Extend iframe with a new allowusermedia attribute (issue: #268)

From: Adam Bergkvist <adam.bergkvist@ericsson.com>
Date: Wed, 10 Feb 2016 14:39:08 +0000
To: Stefan Håkansson LK <stefan.lk.hakansson@ericsson.com>, Martin Thomson <martin.thomson@gmail.com>
CC: Harald Alvestrand <harald@alvestrand.no>, "public-media-capture@w3.org" <public-media-capture@w3.org>
Message-ID: <A222C88B6882744D8D4B9681B3158890295518E0@ESESSMB307.ericsson.se>
On 2016-02-10 13:46, Stefan Håkansson LK wrote:
> On 10/02/16 10:34, Martin Thomson wrote:
>> On 10 February 2016 at 20:26, Stefan Håkansson LK
>> <stefan.lk.hakansson@ericsson.com> wrote:
>>> Where did you get that figure? I noted that the "floating proposal" has
>>> some data, but there is no data for gUM and iFrames.
>>
>> Yes, that data is purely generic from what I can see.  I didn't mean
>> to imply that it applied to gUM.
>>
>>> One thought that struck me: would explicit delegation also apply to
>>> same-origin iFrames?
>>
>> Well, that's a part that #313 doesn't cover and it should.  A
>> same-origin iframe can just reach out and access its parent's DOM, so
>> any restriction is pointless.  The permissions delegation option has
>> same-origin iframes gain permissions automatically.
>
> I agree to this.

I've updated #313 to only enforce the need for "allowed to access user 
media" in the case of cross-origin iframes.

/Adam
Received on Wednesday, 10 February 2016 14:39:40 UTC

This archive was generated by hypermail 2.3.1 : Wednesday, 10 February 2016 14:39:40 UTC