Re: [deviceorientation] Security/privacy consideration: cross-origin linkage

one way to mitigate this (which would also help with the [TouchSignatures attack](https://blogs.ncl.ac.uk/security/2016/02/05/touchsignatures-identification-of-user-touch-actions-and-pins-based-on-mobile-sensor-data-via-javascript/)) would be to restrict DeviceOrientation to visible browsing context.

-- 
GitHub Notification of comment by dontcallmedom
Please view or discuss this issue at https://github.com/w3c/deviceorientation/issues/33#issuecomment-295158342 using your GitHub account

Received on Wednesday, 19 April 2017 08:20:06 UTC