Re: [presentation-api] Consider checking for security context in the PresentationRequest constructor

The permission to use a presentation display is intended to be 
ephemeral and only for the duration of the presentation, like 
following a link.  If something is presented that the user doesn't 
want they can close the presentation (or the tab that started it) and 
nothing has changed.  Also note the features that cause a user dialog 
to appear are gated by a user gesture requirement.

The group (led by @tidoust) also assessed the API against the 
"Powerful Features" rubric authored by @mikewest, the conclusions are 
in Issue #45 linked above and the thread linked in 
https://github.com/w3c/presentation-api/issues/45#issuecomment-103376106.

If you have new information specific to the Presentation API you'd 
like the group to consider around this, then feel free to open a new 
issue in GitHub.

Meanwhile, I'll prepare a PR to address the original suggestion to 
improve the spec around the mixed context check.



-- 
GitHub Notification of comment by mfoltzgoogle
Please view or discuss this issue at 
https://github.com/w3c/presentation-api/issues/362#issuecomment-263366142
 using your GitHub account

Received on Monday, 28 November 2016 19:18:15 UTC