[Webkit-unassigned] [Bug 152299] [Privileged Contexts] Enable opt-in to DeviceOrientation and DeviceMotion for HTTPS-based iframes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=152299

--- Comment #11 from Stephen Underwood <_ at sphvn.com> ---
(In reply to comment #10)
> Actually, I just thought of a different attack.  Better talk to our security
> folks before I describe it :-)

Will wait for you to hear back from your security team.  Surely there is a way we can handle these vulnerabilities without blocking this feature.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160329/2a8a5d1a/attachment.html>