Re: Comments/Questions on Media Capture Streams – Privacy and Security Considerations

On the other hand, it's the advice we give to sites which handle credit
card numbers, e-mails, and other sensitive information. Generally, if
you once have an XSS on your site, it's fairly hard to clean up later.

-Ekr


On Fri, Oct 23, 2015 at 9:01 PM, Martin Thomson <martin.thomson@gmail.com>
wrote:

> On 23 October 2015 at 17:27, Nick Doty <npdoty@w3.org> wrote:
> > The current advice in the specification is for site developers that use
> the API not to have security vulnerabilities anywhere on their sites. That
> doesn't seem like advice that can or will be followed.
>
> Yes, I agree that this sort of advice is foolish.
>