Re: [mediacapture-main] enumerateDevices can be used to track user devices in background pages (#561)

> (has focus) ... 1000 frames ... Each frame can then be used to call enumerateDevices  at different times [long after it has lost focus]

Good one. The spec mitigation is flawed. [[storedDeviceList]] cannot live in the browsing context. Instead, it would have to be cached per origin probably.

> 5 seems simpler to spec, simpler to implement and web compatible. ... any downsides ... ?

It would solve all these issues, including the 1000 frames. It might also help reign in the rampant misuse, steering it toward its intended use-case.

The only downside I see would be if https://github.com/w3c/mediacapture-main/issues/560 isn't resolved favorably.

It would be weird if *enumerateDevices()* blocked in background tabs and *getUserMedia()* didn't.

-- 
GitHub Notification of comment by jan-ivar
Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/561#issuecomment-457713003 using your GitHub account

Received on Friday, 25 January 2019 20:18:48 UTC