[webkit-dev] Request for position on Permissions-Policy header
iclelland at chromium.org
Tue Sep 29 08:14:03 PDT 2020
(Sending this from the right email address this time, hopefully)
I'd like to ask WebKit leads for their stance on the Permissions-Policy
Permissions Policy is the new (since
https://github.com/w3c/webappsec-permissions-policy/issues/359) name for
Feature Policy, and the Permissions-Policy header is part of that spec.
WebKit has supported Feature Policy through the <iframe allow> attribute
for some time, and the header has been designed to augment that
functionality, by allowing sites to control which origins should never be
granted use of powerful features. (Previously, the Feature-Policy header
could be used to implicitly *grant* that delegation, rather than blocking
it; that has been changed in response to developer feedback)
I'm happy to discuss this in any forum, if folks have questions.
Tag review: https://github.com/w3ctag/design-reviews/issues/341
Original intent to prototype in Blink:
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the webkit-dev