Re: [manifest] Allow multiple application contexts per app (#294)

>  Fair enough. So to confirm, as the spec is currently written calling window.open() from an application context will always create a browsing context without the manifest applied? 

correct. 

> The only way to create an application context with the manifest applied is by launching an app?

Correct. This could also help to mitigate a kind of masquerading attack: as opening an app with window.open can create a clear overlay with browser chrome.  

> Just for reference, here is the algorithm from Jonas' original application scopes proposal, which I agree with:

I think parts of Jonas' proposal is very OS specific - it makes UI assumptions (e.g., showing a chooser). For instance, it wouldn't make sense in iOS - where these kinds of navigation are handled automagically (they get routed through Safari, which is pretty funny to watch). However, it would be fine to use that algorithm in FxOS. 

The way that scope is currently specified allows implementation to freely adapt the concept to their own needs and underlying OS conventions. I think we should let implementers play around with the concept of scope and see what emerges. If we see that there is something to standardize, then we can get agreement and do that.  

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/294#issuecomment-69517906