- From: Karl Tomlinson via GitHub <sysbot+gh@w3.org>
- Date: Fri, 23 Feb 2024 08:51:23 +0000
- To: public-webrtc@w3.org
karlt has just created a new issue for https://github.com/w3c/mediacapture-screen-share-extensions: == Should top-level transient activation be sufficient for `getDisplayMedia()` on cross-origin iframes with allow="display-capture"? == This [came up](https://bugzilla.mozilla.org/show_bug.cgi?id=1704278) when we added the transient activation requirement to Gecko. The data flow affected was "click handler in main document" -> `iframe.contentWindow.postMessage()` -> "`getDisplayMedia()` inside iframe". The gesture in the top-level Document [does not affect](https://html.spec.whatwg.org/multipage/interaction.html#activation-notification) cross-origin descendant Documents. I assume the purpose of the transient activation test is to require a user gesture and the precise location of the user gesture is not important? If so, then checking for transient activation on the top-level Window instead of on the relevant global object is an option to allow this use case. Would any host Document want to grant a cross-origin iframe "display-capture" permission but restrict its `getDisplayMedia()` calls to a user gesture specifically on the iframe? Please view or discuss this issue at https://github.com/w3c/mediacapture-screen-share-extensions/issues/11 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Friday, 23 February 2024 08:51:25 UTC