Re: [w3ctag/design-reviews] State extension for JS Self-Profiling API. (Issue #682)

Hi folks! Regarding the [mitigation](https://github.com/WICG/js-self-profiling/blob/main/markers.md#privacy-and-security) against cross-origin leakage that you've described - can you expand on this a little bit and be a bit more clear about what the mitigation strategy is? Are there ways that you could envision this API being used to intentionally and maliciously leak data across origin boundaries? It would be good if you could elaborate on the potential misuse (and mitigations).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/682#issuecomment-987685841