W3C home > Mailing lists > Public > public-web-security@w3.org > November 2017

Web Audio API for review

From: Chris Lilley <chris@w3.org>
Date: Thu, 30 Nov 2017 11:39:51 -0500
To: public-web-security@w3.org
Message-ID: <0dd4dffd-9acf-4229-2be2-d839560c1f79@w3.org>
Audio WG requests security review of the Web Audio API

  * Specification URL: https://webaudio.github.io/web-audio-api/
  * GitHub repo: https://github.com/WebAudio/web-audio-api

The major change in the last year or two is the extensibility point. We 
switched from ScriptProcessorNode 
<https://webaudio.github.io/web-audio-api/#the-scriptprocessornode-interface-deprecated> 
(running on the main thread, now deprecated) to Audio worklets 
<https://webaudio.github.io/web-audio-api/#AudioWorklet> which are of 
course derived from the TAG/CSS Houdini Worklet. Plus a lot of detailed 
spec improvements and clarifications. Complete changes list 
<https://github.com/WebAudio/web-audio-api/commits/gh-pages>.

There is a Security and Privacy 
<https://webaudio.github.io/web-audio-api/#Security-Privacy-Considerations> 
self- assessment appendix.

Ideally, we would like to move to CR by the end of 2017. Please let us 
know if you would like more time to review. Review comments should 
ideally be raised asissues on GitHub 
<https://github.com/WebAudio/web-audio-api/milestone/1>.

-- 
Chris Lilley
@svgeesus
Technical Director @ W3C
W3C Strategy Team, Core Web Design
W3C Architecture & Technology Team, Core Web & Media
Received on Thursday, 30 November 2017 16:39:58 UTC

This archive was generated by hypermail 2.3.1 : Thursday, 30 November 2017 16:39:59 UTC