Re: [mediacapture-main] Move enumerateDevices behind permission (#612)

> Does this mean that the site can enumerate _all_ devices after the user gives access to _any_ device?

By default, a site page will not be able to enumerate any device even if the site has persistent access to the camera/microphone.
A page has to request capture and be granted access to one device. At that point, the page will potentially get access to all camera and microphone information.
This makes enumerateDevices leaking information after getUserMedia leaked information, thus making enumerateDevices behind the getUserMedia permission as requested by this issue.

The fact that all devices are leaked after one getUserMedia call should be/is already treated as a separate issue.

-- 
GitHub Notification of comment by youennf
Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/612#issuecomment-562163646 using your GitHub account

Received on Thursday, 5 December 2019 14:54:38 UTC