W3C home > Mailing lists > Public > public-media-capture@w3.org > April 2014

Re: Permission dialog across pages, domains

From: cowwoc <cowwoc@bbs.darktech.org>
Date: Fri, 18 Apr 2014 15:11:42 -0400
Message-ID: <535178EE.1050008@bbs.darktech.org>
To: Justin Uberti <juberti@google.com>, Martin Thomson <martin.thomson@gmail.com>
CC: "public-media-capture@w3.org" <public-media-capture@w3.org>
On 18/04/2014 2:26 PM, Justin Uberti wrote:
> On Fri, Apr 18, 2014 at 11:14 AM, Martin Thomson 
> <martin.thomson@gmail.com <mailto:martin.thomson@gmail.com>> wrote:
>
>     On 18 April 2014 11:06, cowwoc <cowwoc@bbs.darktech.org
>     <mailto:cowwoc@bbs.darktech.org>> wrote:
>     > It is my understanding that all implementations will cache the
>     user response
>     > to the permission dialog for HTTPS pages.
>
>     Not all, but that is possible.
>
>     > Does the permission get remembered across a single page? Or
>     across all pages on
>     > the same domain? Or across all pages across the domain and
>     sub-domains?
>
>     It's by web origin: scheme + host + port [RFC6454]
>
>
> This is what Chrome does.
>

Do the implementations allow the use of document.domain or CORS to relax 
this restriction across sub-domains?

Gili
Received on Friday, 18 April 2014 19:12:12 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 16:26:26 UTC