Re: [webauthn] Updates based on DOM's abort reason (#1706)

I'm worried that because the algorithm doesn't make a distinction between successful and failure return values you could spoof successful return values as abort reason can be anything.

It would be better for this algorithm to either throw or return something I think.

-- 
GitHub Notification of comment by annevk
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1706#issuecomment-1067903395 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 15 March 2022 11:57:58 UTC