W3C home > Mailing lists > Public > public-webappsec@w3.org > June 2016

Re: Should permission requests require a user gesture?

From: Chris Palmer <palmer@google.com>
Date: Thu, 9 Jun 2016 17:19:56 -0700
Message-ID: <CAOuvq23S+V+jBhozMrythXPzuO+5P5kTFPtzfsT8aJ17z-TfNg@mail.gmail.com>
To: Jeffrey Yasskin <jyasskin@google.com>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>, Jan-Ivar Bruaroey <jib@mozilla.com>
I responded on the GitHub thread.

On Thu, Jun 2, 2016 at 10:18 AM, Jeffrey Yasskin <jyasskin@google.com>
wrote:

> https://github.com/w3c/permissions/issues/77 tracks a suggestion to
> require a user gesture in navigator.permission.request() calls. I'd
> like to find a recommendation from this group for all new
> permission-requesting functions and then follow it for the particular
> function in the permissions API.
>
> Jan-Ivar's arguing that requiring a gesture hurts Firefox's permission
> model, and that other reasons to require a gesture are better handled
> through other browser UI.
>
> What do you folks think?
>
> Thanks,
> Jeffrey
>
>
Received on Friday, 10 June 2016 00:20:36 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:20 UTC