Re: [webauthn] Prohibit Create Credential from cross-origin iframes (#1394)

Or rename the feature policy, at least? I thought the idea was that if we decide later to allow MakeCredential from cross-origin iframes, we would need a new feature policy, so as not to change the behavior of an existing one for sites that might be using it. So the feature policy being added for this should correspond specifically to GetAssertion, if I understand correctly.

-- 
GitHub Notification of comment by kenrb
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1394#issuecomment-603962384 using your GitHub account

Received on Wednesday, 25 March 2020 17:01:27 UTC