Re: [manifest] Define identity of a web app (closes #272) (a2e8c31)

> The Manifest for Web Applications specification currently doesn't have anything to say on the topic of permissions, and therefore this doesn't change anything.

I'm not talking about permissions in the manifest, but in the user agent. The way it works today is that they run a stripped-down instance without the Chrome (or with a minimal, changed Chrome), but keep things like localStorage, permissions, etc. (Web Storage is then actually another security-related issue with this).

If this changed nothing, then the manifest wouldn't make sense. This changes app installation in a way that you can install Web apps in a way that works similar to "native" apps and next to the "native" ones on the home screen. For these other ones the assumption is certainly that one app can't access things I gave another app permission to, same as it shouldn't access sandboxed data the other app is storing.

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/commit/a2e8c31ecda1ca7d5673a02e08698e5cf64b5df2#commitcomment-9245677