Re: [w3c/manifest] Adding protocol handlers (#972)

@marcoscaceres commented on this pull request.



> +          <a data-cite="HTML/system-state#security-and-privacy">
+          Security and privacy section</a> of

Let's avoid the hard link here... The link to registerProtocolHandler() is probably enough. 

```suggestion
          Security and privacy section of
```

> +          The user agent MUST ask for permission when using a protocol
+          handler for the first time. This feature requires user interaction
+          and a script cannot communicate with another application on its

This seems odd (not the asking for permission part - but this doesn't feel like it's wired up properly)...  

Using HTML+JS as an example, can you show me what would this look like in practice? If it's to do with "permissions", then I suspect we need some kind of Permissions Policy or Permissions API thing here.  


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/pull/972#pullrequestreview-661766034