W3C home > Mailing lists > Public > public-device-apis-log@w3.org > January 2018

Re: [battery] Allow use in same-origin children, add Feature Policy integration

From: Anssi Kostiainen via GitHub <sysbot+gh@w3.org>
Date: Wed, 10 Jan 2018 14:16:00 +0000
To: public-device-apis-log@w3.org
Message-ID: <issue_comment.created-356614219-1515593731-sysbot+gh@w3.org>
>For FP, what would be the plan? Would the API be denied by default or allowed?

This PR proposes that the default allowlist for the Battery Status API is `["self"]` and that the battery promise will be rejected with a `SecurityError` if not allowed to use the policy-controlled feature.

>Do you know what's the idea for sensors?

Concrete sensors that extend `Sensor` throw at construction if they're not allowed to use the policy-controlled feature, see https://w3c.github.io/sensors/#construct-sensor-object

The default allowlist for sensors is similarly `["self"]`, see https://w3c.github.io/sensors/#feature-policy-api



-- 
GitHub Notification of comment by anssiko
Please view or discuss this issue at https://github.com/w3c/battery/pull/13#issuecomment-356614219 using your GitHub account
Received on Wednesday, 10 January 2018 14:19:12 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 19:34:25 UTC