Re: [w3c/permissions] Only allow permissions.request() during user interaction (#77) from Jeffrey Yasskin on 2016-06-02 (public-webapps-github@w3.org from June 2016)

From: Jeffrey Yasskin <notifications@github.com>
Date: Thu, 02 Jun 2016 09:23:44 -0700
To: w3c/permissions <permissions@noreply.github.com>
Cc:
Message-ID: <w3c/permissions/issues/77/223344790@github.com>

Are you worried at all about click-jacking? If the page can control when the door-hanger appears, it can show it as the user's about to click where 'accept' will be located?

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/77#issuecomment-223344790

Received on Thursday, 2 June 2016 16:24:14 UTC