Note that should be raised against https://github.com/WICG/feature-policy/issues/new really, as that follows from Feature Policy (see also #159). And `honest.com` can always expose a `postMessage()` service to `dishonest.com`. `allow` just avoids having to write a `postMessage()` service, as far as I can tell. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/w3ctag/design-reviews/issues/225#issuecomment-361902707
Received on Wednesday, 31 January 2018 11:20:11 UTC