- From: Matt Giuca <notifications@github.com>
- Date: Tue, 28 Jun 2016 19:51:22 -0700
- To: w3c/manifest <manifest@noreply.github.com>
- Cc:
Received on Wednesday, 29 June 2016 02:52:13 UTC
Are you saying there's a problem with a malicious third-party JavaScript running in your site's JS context (capturing the install event, calling preventDefault, and never prompting)? I think if you're letting untrustworthy JS code run on your site (due to XSS presumably) then it's game over already; we can't design around that scenario. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/w3c/manifest/issues/417#issuecomment-229242841
Received on Wednesday, 29 June 2016 02:52:13 UTC