I would like to see some documentation of this threat model before considering it in the design of specifications. I would consider exception messages to be equivalent to the browser engine major version, which is already available to script. If there is concern about leaking sensitive information to script then I know Blink has a mechanism for providing sanitized and unsanitized error messages, the latter only being available on the Javascript console and not to script. I suspect this feature was inherited from WebKit. -- GitHub Notification of comment by reillyeon Please view or discuss this issue at https://github.com/w3c/screen-wake-lock/issues/352#issuecomment-1266430290 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-configReceived on Tuesday, 4 October 2022 05:55:17 UTC
This archive was generated by hypermail 2.4.0 : Tuesday, 4 October 2022 05:55:18 UTC