Re: [battery] Allow use in same-origin children, add Feature Policy integration

>For FP, what would be the plan? Would the API be denied by default or allowed?

This PR proposes that the default allowlist for the Battery Status API is `["self"]` and that the battery promise will be rejected with a `SecurityError` if not allowed to use the policy-controlled feature.

>Do you know what's the idea for sensors?

Concrete sensors that extend `Sensor` throw at construction if they're not allowed to use the policy-controlled feature, see https://w3c.github.io/sensors/#construct-sensor-object

The default allowlist for sensors is similarly `["self"]`, see https://w3c.github.io/sensors/#feature-policy-api



-- 
GitHub Notification of comment by anssiko
Please view or discuss this issue at https://github.com/w3c/battery/pull/13#issuecomment-356614219 using your GitHub account

Received on Wednesday, 10 January 2018 14:19:12 UTC