[Webkit-unassigned] [Bug 171934] Content from loopback addresses (e.g. should not be considered mixed content

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed May 23 09:33:38 PDT 2018


--- Comment #20 from Alexey Proskuryakov <ap at webkit.org> ---
Having web pages access (or enumerate) local devices would have to come with a meaningful permission model, which is unlikely to exist. Asking the user anything along the lines of "www.arduino.corp.trusted.myphishingpage.cc would like to access for an unknown reason with unknown consequences, Allow/Block" wouldn't make any security sense.

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180523/486acc38/attachment.html>

More information about the webkit-unassigned mailing list