August 2021 - webkit-dev - lists.webkit.org

Network Information API reboot: request for early feedback
by Thomas Steiner 31 Aug '21

31 Aug '21

Hey WebKit folks, I have rebooted the Network Information API recently. This is all in a relatively early stage, but I thought now would be a good time to get your feedback on the proposal: - Motivational doc: https://docs.google.com/document/d/1RDA23zSNdDuIcxZTX9Xo3zlD2fxf8dZg9-e0YaJ… - Explainer: https://github.com/tomayac/netinfo/blob/relaunch/README.md - Spec draft: https://ghcdn.rawgit.org/tomayac/netinfo/relaunch/index.html Here is the short version: ```js // Is the current network a metered network according to the OS-level setting // in, e.g., Android or Windows, i.e., _without_ the UA guesstimating it. The UA // may provide its own (override) setting, though: navigator.connection.metered; // false // What is the sustained connection speed, as measured on the OS-level (à la // `nettop`) for a sliding window and bucketed in buckets of exponentially // growing size in bit per second, e.g., 25,000,000 (25 Mbit/s), 50,000,000 // (50 Mbit/s). It's fine to report `Infinity` if the user agent doesn't want to // reveal more, or if the sustained speed isn't known yet. navigator.connection.metered; // 50000000 // Changes to either of the attributes are exposed via an event: navigator.connection.addEventListener("change", (event) => { console.log(event); }); ``` Each of the attributes is accompanied by a client hint header that reflects the attribute: ```bash Sec-CH-Metered-Connection: 1 Sec-CH-Sustained-Speed: 50000000 ``` Thanks in advance for your thoughts, here, or in the motivational document. Cheers, Tom

3 11

Content Security Policy for WebAssembly
by Francis McCabe 30 Aug '21

30 Aug '21

Hello Webkit devs We would like to get an official position on this proposal. The proposal is to extend the coverage of W3C Content Security Policy ( https://www.w3.org/TR/CSP3/) to include WebAssembly modules. Currently, CSP has an option to manage policy for WebAssembly execution through the 'unsafe-eval' source directive. However, the primary role of that directive is to allow eval in JavaScript. This change adds a specific source directive 'wasm-unsafe-eval' to CSP that permits an engine to compile and instantiate a wasm module. In addition, the proposal is to extend the coverage of existing script-src directives to include wasm modules downloaded using the fetch API. This would affect instantiateStreaming and compileStreaming. The link to the proposed changes to CSP is https://github.com/w3c/webappsec-csp/pull/293. The link to the proposed change in WebAssembly's web API is https://github.com/WebAssembly/content-security-policy/tree/fgm-patch-4 Thank you Francis McCabe

1 0

Request for Position on Exception Handling in WebAssembly
by Andreas Haas 30 Aug '21

30 Aug '21

Hello webkit-dev, We would like to get an official position from WebKit on the Exception Handling in WebAssembly proposal ( https://github.com/WebAssembly/exception-handling) We experimented with WebAssembly Exception Handling successfully in an Origin Trial and plan to ship our implementation soon. Cheers, Andreas Haas >

2 1

Request for position: Cryptographically secure random UUIDs
by Benjamin Coe 27 Aug '21

27 Aug '21

Hello WebKit folks, This is a request for WebKit's position on introducing the JavaScript method randomUUID(), for generating RFC 4122 version 4 identifiers, to the crypto interface. - Explainer: https://github.com/WICG/uuid/blob/gh-pages/explainer.md - Specification: https://wicg.github.io/uuid/ - ChromeStatus: https://www.chromestatus.com/feature/5689159362543616 Look forward to feedback, -- Ben.

2 1

Request for position on self.reportError()
by Domenic Denicola 27 Aug '21

27 Aug '21

Hi webkit-dev, We recently added a small utility function, self.reportError(), to the HTML Standard [1]. It is pretty simple and just lets developers appropriately send errors to the "error" event handler and the console, like what happens when the browser reports uncaught exceptions. This is already implemented in Firefox and we're looking to ship it in Chrome soon. Would you all be interested this feature as well? It should be pretty simple to implement; it was for us at least. [2] Thanks, -Domenic [1]: https://github.com/whatwg/html/pull/1196 [2]: https://chromium-review.googlesource.com/c/chromium/src/+/3125854

2 1

Request for Position on AccessHandles for the Origin Private File System
by Emanuel Krivoy 27 Aug '21

27 Aug '21

Hello webkit-dev, We would like to get an official position on AccessHandles ( https://github.com/WICG/file-system-access/blob/main/AccessHandle.md) an extension to the Origin Private File System that brings very performant access to data. This new surface differs from existing ones by offering in-place and exclusive write access to a file’s content. This change, along with the ability to consistently read unflushed modifications and the availability of a synchronous variant on dedicated workers, significantly improves performance and unblocks new use cases for the File System Access API. We had requested a position on a previous iteration of this API: https://lists.webkit.org/pipermail/webkit-dev/2021-February/031689.html. This new proposal is a response to feedback that Storage Foundation seemed to duplicate existing functionality and should be integrated into the File System Access API. Thank you, Emanuel Krivoy

1 1

License for files under Sources/WebCore/Resources
by Yousuke.Kimoto＠sony.com 25 Aug '21

25 Aug '21

Hi all, I have a question about files under Source/WebCore/Resources. WebKit is licensed under LGPL so the files under Source/WebCore/Resources are also licensed under LGPL. Is my understanding correct? Best Regards, Yousuke Kimoto

1 0

Request for Position: Secure Payment Confirmation
by Stephen Mcgruer 24 Aug '21

24 Aug '21

Hi WebKit, I am seeking WebKit's position on the Secure Payment Confirmation Web API currently under development in the Web Payments Working Group. Secure Payment Confirmation (SPC) is a proposed Web API to support streamlined authentication during a payment transaction. It is designed to scale authentication across merchants, to be used within a wide range of authentication protocols, and to produce cryptographic evidence that the user has confirmed transaction details. SPC adds payment-specific capabilities atop WebAuthn and is designed with stronger privacy protections than current risk analysis approaches that rely on data collection. Specification Title: Secure Payment Confirmation Specification or proposal URL: https://w3c.github.io/secure-payment-confirmation/ Explainer URL: https://github.com/w3c/secure-payment-confirmation/blob/main/explainer.md TAG review: https://github.com/w3ctag/design-reviews/issues/544#issuecomment-904606925 Mozilla Standards Position: https://github.com/mozilla/standards-positions/issues/570 Thanks! Stephen

1 0

[Help] WebProcess CRASHED
by Alemar 21 Aug '21

21 Aug '21

Hello list! Currently I'm having a problem with the library when going to www.bing.com (it seems to happen only on that site though), where the browser process crashes. I thought it was my app, but when running it against the MiniBrowser, it also crashes! >From the developer tools, I'm suspecting it could be related to trying to load (and play?) an mp3 file (start.mp3). The current PC it's running on is a brand-new installed Ubuntu 21.04 up-to-date which seems to use the libwebkit2gtk-4.0-37 library. Such a PC does not have any audio drivers installed, I'm basically running off Ubuntu Server with X11, Openbox and NVIDIA drivers, nothing more, nothing less. I suspect it could be because it's trying to play the audio file but it can't. However, the log does not show much: (MiniBrowser:72279): dbind-WARNING **: 18:07:43.671: AT-SPI: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.ServiceUnknown: The name org.a11y.Bus was not provided by any .service files (WebKitWebProcess:72294): dbind-WARNING **: 18:07:43.752: AT-SPI: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.ServiceUnknown: The name org.a11y.Bus was not provided by any .service files (WebKitWebProcess:72393): dbind-WARNING **: 18:08:25.851: AT-SPI: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.ServiceUnknown: The name org.a11y.Bus was not provided by any .service files (WebKitWebProcess:72420): dbind-WARNING **: 18:08:27.415: AT-SPI: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.ServiceUnknown: The name org.a11y.Bus was not provided by any .service files ** (MiniBrowser:72279): WARNING **: 18:08:27.499: WebProcess CRASHED Is there any way I can try to get more debugging info for you guys to see if I can fix the problem on my own, but also without building the full webkit library as it's really heavy and time-consuming? Thanks, -Alemar

2 5

Request for position: Add id member to Web Application Manifest
by Phillis Tang 18 Aug '21

18 Aug '21

Hi Webkit, I am seeking WebKit's position on the proposal to add an "id" member to the web application manifest(https://www.w3.org/TR/appmanifest/). The proposal explicitly defines what uniquely identifies a web application and allows developers to specify the identifier in the manifest. See spec change pull request https://github.com/w3c/manifest/pull/988 Please let us know if you have any feedback! Thanks, Phillis

1 0