W3C home > Mailing lists > Public > public-secondscreen@w3.org > May 2016

[presentation-api] Pull Request: Reject when sandbox blocks the feature instead of not exposing.

From: Mounir Lamouri via GitHub <sysbot+gh@w3.org>
Date: Thu, 05 May 2016 15:16:00 +0000
To: public-secondscreen@w3.org
Message-ID: <pull_request.opened-69021424-1462461356-sysbot+gh@w3.org>
mounirlamouri has just submitted a new pull request for 
https://github.com/w3c/presentation-api:

== Reject when sandbox blocks the feature instead of not exposing. ==
The reasons are:
- navigator.presentation returning null only in this edge case will 
lead
  to bugs because developers will not expect this;
- we already have failure mode for all the methods;
- a malicious iframe could hold a Presentation instance if the 
embedder
  where to have the sandbox flags not set properly for a short period 
of
  time (eg. load race condition).

This change also does:
- add mixed security check for getAvailability() so we don't waste
  resources listen for availability when not needed;
- fix editorial issues whith mixed security check where the steps were
  not stopped.

See https://github.com/w3c/presentation-api/pull/292
Received on Thursday, 5 May 2016 15:17:54 UTC

This archive was generated by hypermail 2.3.1 : Thursday, 5 May 2016 15:17:55 UTC