OP talks about site isolation, but do you mean cross-origin isolation, i.e., requiring COOP+COEP? It would help to see something more flushed out. Once you have COOP+COEP the main risk that remains (as Nika mentioned) is controls and such that might capture user state. Or `:visited` for instance. -- GitHub Notification of comment by annevk Please view or discuss this issue at https://github.com/w3c/mediacapture-screen-share/issues/155#issuecomment-805882461 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-configReceived on Wednesday, 24 March 2021 14:47:27 UTC
This archive was generated by hypermail 2.4.0 : Saturday, 6 May 2023 21:19:53 UTC