Re: [w3c/manifest] Replace "determine the installability of the document" with some manifest/document reconciliation steps (#912)

> the concept of "installability of the document" doesn't make a lot of sense, given that most browsers allow any document to be installed. So we should just remove the concept of "installability of the document".

Removed. 

> a) making up a virtual manifest for sites that have none

I think it might be overly presumptuous to assume they use the same mechanism or defaults. I think we should just stay silent on this.   

>  b) reconciling the processed manifest with the document URL to make sure its scope and start_url are same-origin as the document URL. 

I think this is handled as far as there is a document and link relationship. 

> The goal is to let an external system (such as an app store) install a manifest without any document,

I'm thinking this should be a non-goal *for now*. We should just solve for manifests installed from documents.  

> but if a browser installs a manifest from a document, disallow installation of an app that's hosted on a different origin to the originating document.

Agree. 


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/912#issuecomment-851948805

Received on Tuesday, 1 June 2021 08:47:34 UTC