Re: [webauthn] Fix #593: employ PRECIS RFC8264 et al for 'name'-ish domstring values

wrt..
> Agreed, the overflow protections are important.  (@stpeter)
> I agree about the presentation warning.  (@aphillips)

I have done some modest searching thru WhatWG and W3C specs and am unable to find appropriate example language to plagiarize for such a "presentation warning".

In any case, here's what I presently came up with:

When [=clients=], client platform, or [=authenticators=] display a [`PublicKeyCredentialUserEntity/displayName`](https://w3c.github.io/webauthn/#dom-publickeycredentialuserentity-displayname)'s or [`PublicKeyCredentialEntity/name`](https://w3c.github.io/webauthn/#dom-publickeycredentialentity-name)'s value, they should always use UI elements to provide a clear boundary around the displayed value, and not allow overflow into other elements [[css-overflow-3]].

thoughts?

-- 
GitHub Notification of comment by equalsJeffH
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/951#issuecomment-404295659 using your GitHub account

Received on Wednesday, 11 July 2018 20:13:40 UTC