Re: [screen-wake-lock] Do not use allow="screen-wake-lock" for iframes (#277)

The "allow" attribute is defined by Permissions Policy (formerly known as Feature Policy). This XSS concern should be raised against that specification instead.

-- 
GitHub Notification of comment by reillyeon
Please view or discuss this issue at https://github.com/w3c/screen-wake-lock/issues/277#issuecomment-679391537 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 24 August 2020 22:08:53 UTC