Re: [mediacapture-screen-share] Should top-level transient activation be sufficient for `getDisplayMedia()` on cross-origin iframes with allow="display-capture"? (#167)

> Would any host Document want to grant a cross-origin iframe "display-capture" permission but restrict its getDisplayMedia() calls to a user gesture specifically on the iframe?

I cannot think of a case like that.
But I can see top level frames not wanting that any random click can be used by third-party iframes, even though they have "display-capture" permission.
My understanding here is that the postMessage from top level frame to third-party iframe is triggering the "transient activation" delegation.
Is that correct?

-- 
GitHub Notification of comment by youennf
Please view or discuss this issue at https://github.com/w3c/mediacapture-screen-share/issues/167#issuecomment-821046790 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 16 April 2021 09:26:40 UTC