[mediacapture-main] Disable user media by default in cross-origin iframes

raymeskhoury has just created a new issue for 
https://github.com/w3c/mediacapture-main:

== Disable user media by default in cross-origin iframes ==
We would like to explore disabling user media (camera/mic/speakers) by
 default for cross-origin iframes. The idea is that it would be 
possible for the embedder to re-enable user media using the proposed 
[Feature 
Policy](https://docs.google.com/document/d/1k0Ua-ZWlM_PsFCFdLMa8kaVTo32PeNZ4G7FFHqpFx4E/edit#heading=h.4yubgixv5l6b)
 mechanism.

getUserMedia already has a failure mode that occurs as a result of the
 user denying permission for hardware. This same failure mode can be 
reused but we probably still want to alter the spec to include the 
additional check to see if the feature is allowed by Feature Policy.

I think we probably want to add 3 features: camera, microphone and 
speakers, align with the permissions that exist in the [permissions 
spec](https://w3c.github.io/permissions/#permission-registry).

Note that this issue is mainly just intended to start the discussion 
about this change. We would need to nail down the Feature Policy spec 
before moving forward. Guidance is appreciated :).

The motivations for this change and a discussion of compatibility risk
 can be found here: 
https://docs.google.com/document/d/13dp9xWVyGM8THAQohDOT2mMOTSGLxEhSZEvgpmVLrxU/edit

@clelland @alvestrand 

Please view or discuss this issue at 
https://github.com/w3c/mediacapture-main/issues/434 using your GitHub 
account

Received on Wednesday, 8 February 2017 06:31:17 UTC