W3C home > Mailing lists > Public > public-webrtc-logs@w3.org > December 2019

Re: [mediacapture-main] Move enumerateDevices behind permission (#612)

From: youennf via GitHub <sysbot+gh@w3.org>
Date: Thu, 05 Dec 2019 14:54:37 +0000
To: public-webrtc-logs@w3.org
Message-ID: <issue_comment.created-562163646-1575557659-sysbot+gh@w3.org>
> Does this mean that the site can enumerate _all_ devices after the user gives access to _any_ device?

By default, a site page will not be able to enumerate any device even if the site has persistent access to the camera/microphone.
A page has to request capture and be granted access to one device. At that point, the page will potentially get access to all camera and microphone information.
This makes enumerateDevices leaking information after getUserMedia leaked information, thus making enumerateDevices behind the getUserMedia permission as requested by this issue.

The fact that all devices are leaked after one getUserMedia call should be/is already treated as a separate issue.

GitHub Notification of comment by youennf
Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/612#issuecomment-562163646 using your GitHub account
Received on Thursday, 5 December 2019 14:54:38 UTC

This archive was generated by hypermail 2.4.0 : Saturday, 6 May 2023 21:19:49 UTC