One advantage of keeping it as an opaqueToken is that from the developer point of view you can be pretty certain of it's provenance - it probably came in a postMessage via a message port you opened. This makes it easy to decide how much to trust it. With a UUID/String you have to do a lot more thinking about how it got to you before you decide to trust it. I don't think the benefit is sufficient for the risk. -- GitHub Notification of comment by steely-glint Please view or discuss this issue at https://github.com/w3c/mediacapture-region/issues/46#issuecomment-1164604849 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-configReceived on Thursday, 23 June 2022 16:08:37 UTC
This archive was generated by hypermail 2.4.0 : Saturday, 6 May 2023 21:19:57 UTC