Re: [w3c/permissions] Handle non-fully-active documents (#162)

> Every API MUST recheck if it's "allowed to" use the powerful feature, like Geolocation now does (we make that clear in the TAG recommendation, if it's not already clear).

I think it makes sense to add this recommendation regardless of our decision to send updated events or not, as some APIs like Geolocation that you mentioned already don't guarantee that updates that happen while bfcached are sent. I'll re-read my TAG doc and see if I need to emphasize this more, thanks!

> In reading the current permission state, we can check if the |document| is "fully active" (and reject at that point?).

I think I'm fine with rejecting if that fits the API design. I think this a problem only for iframe detach - it's not a problem for bfcache since you can't access the page while bfcached, and can't have other page refer to the page before (per https://github.com/whatwg/html/issues/6858)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/162#issuecomment-887192077

Received on Tuesday, 27 July 2021 04:09:03 UTC