[mediacapture-main] getUserMedia can be used to detect capabilities without permissions (#697)

guidou has just created a new issue for https://github.com/w3c/mediacapture-main:

== getUserMedia can be used to detect capabilities without permissions ==
The current getUserMedia() spec indicates that prompting for permission (step 5.2) goes after constraints processing (step 3.4).
A consequence of this is that it is possible to determine if the system is capable of, for example full HD capture (or any other capability), by making the appropriate gUM calls and looking at the resulting error.
In these cases, Chromium and Safari return OverconstrainedError and Firefox returns NotFoundError. 

Possible ways to address this:
1. Always return NotAllowedError if constraints processing fails, but no permission to use devices has yet been granted.
2. Prompt before constraints processing. 

Should we update the spec to address this?
 

Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/697 using your GitHub account

Received on Tuesday, 16 June 2020 10:55:24 UTC