W3C home > Mailing lists > Public > public-webauthn@w3.org > August 2019

[webauthn] Pull Request: change sameOriginWithAncestors to crossOrigin, add the latter to collectedClientData

From: =JeffH via GitHub <sysbot+gh@w3.org>
Date: Wed, 14 Aug 2019 01:07:09 +0000
To: public-webauthn@w3.org
Message-ID: <pull_request.opened-307133211-1565744826-sysbot+gh@w3.org>
equalsJeffH has just submitted a new pull request for https://github.com/w3c/webauthn:

== change sameOriginWithAncestors to crossOrigin, add the latter to collectedClientData ==
fixes #1271 

This PR changes the `sameOriginWithAncestors` argument ( to both `[[Create]]()` and `[[DiscoverFromExternalSource]]()` ) to be `crossOrigin` (and thus flip its semantic), and also add this value to `collectedClientData`.

This PR assumes a matching PR will soon be opened on the Credential Management spec in order to add the requisite testing of Feature Policy via the web platform's [`allowed to use`](https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use) algorithm, and to change `sameOriginWithAncestors` to be `crossOrigin`, etc.

See https://github.com/w3c/webauthn/pull/1276
Received on Wednesday, 14 August 2019 01:07:12 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:59:06 UTC