- From: Chris Lilley <chris@w3.org>
- Date: Thu, 30 Nov 2017 11:39:51 -0500
- To: public-web-security@w3.org
- Message-ID: <0dd4dffd-9acf-4229-2be2-d839560c1f79@w3.org>
Audio WG requests security review of the Web Audio API * Specification URL: https://webaudio.github.io/web-audio-api/ * GitHub repo: https://github.com/WebAudio/web-audio-api The major change in the last year or two is the extensibility point. We switched from ScriptProcessorNode <https://webaudio.github.io/web-audio-api/#the-scriptprocessornode-interface-deprecated> (running on the main thread, now deprecated) to Audio worklets <https://webaudio.github.io/web-audio-api/#AudioWorklet> which are of course derived from the TAG/CSS Houdini Worklet. Plus a lot of detailed spec improvements and clarifications. Complete changes list <https://github.com/WebAudio/web-audio-api/commits/gh-pages>. There is a Security and Privacy <https://webaudio.github.io/web-audio-api/#Security-Privacy-Considerations> self- assessment appendix. Ideally, we would like to move to CR by the end of 2017. Please let us know if you would like more time to review. Review comments should ideally be raised asissues on GitHub <https://github.com/WebAudio/web-audio-api/milestone/1>. -- Chris Lilley @svgeesus Technical Director @ W3C W3C Strategy Team, Core Web Design W3C Architecture & Technology Team, Core Web & Media
Received on Thursday, 30 November 2017 16:39:58 UTC