Re: [w3c/manifest] Add guidance for user agents about how to prevent malicious localization strings (Issue #1150)

What if we decided to accomplish two things that are needed here, one is this warning, but also to make a very brief description of update:

## Algorithm to update manifest presentation

- Given two manifests old and new, who's computed app id are the same.
- The user agent will update the presentation of non-security-sensitive manifest members.
- The user agent may discard updates to presentation of security sensitive members.
- The user agent may require user consent or heuristics to allow updating presentation of security sensitive member.


## how this hooks in for localized stuff

When the user's system locale changes, run the update algorithm with 'old' being the current manifest presentation, and 'new' being the new presentation with the new system locale applied?



-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/1150#issuecomment-2450876195
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/manifest/issues/1150/2450876195@github.com>