- From: Jeffrey Yasskin <notifications@github.com>
- Date: Thu, 16 Jan 2025 11:24:11 -0800
- To: w3ctag/design-reviews <design-reviews@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Thursday, 16 January 2025 19:24:15 UTC
Could you update https://github.com/schwering/shared-autofill to point at the active proposals? You should probably also close https://github.com/whatwg/html/pull/8801. What would you expect to happen if an iframe has `allow="autofill"` without including `manual-text`? It might be user-hostile to force them to only use autofill? Should UAs assume that `autofill` implies `manual-text`, or do you know of attacks that allows? Do you have a sense of what fraction of user input this would break, and how many entities would need to update their code to fix the desired input? -- Reply to this email directly or view it on GitHub: https://github.com/w3ctag/design-reviews/issues/831#issuecomment-2596640516 You are receiving this because you are subscribed to this thread. Message ID: <w3ctag/design-reviews/issues/831/2596640516@github.com>
Received on Thursday, 16 January 2025 19:24:15 UTC