[Webkit-unassigned] [Bug 199074] New: Storage Access API: Cap the number of times an iframe document can request access

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jun 20 11:32:01 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=199074

            Bug ID: 199074
           Summary: Storage Access API: Cap the number of times an iframe
                    document can request access
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: wilander at apple.com

We hoped that iframes that request storage access would count the number of times the user has been asked and not repeat the request over and over. However, we're seeing pretty aggressive use of the API and users are complaining. Therefore, we should implement a cap on how many times an iframed document can ask if it is explicitly denied access by the user. This is a first measure. If we see continued aggressive use of the API, we'll have to consider more drastic measures.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190620/08308c7a/attachment.html>


More information about the webkit-unassigned mailing list