[Webkit-unassigned] [Bug 221399] DeviceMotionEvent.requestPermission is not a function in iframe-hosted cross-origin pages, even with feature policy and allow attributes set

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=221399

--- Comment #2 from Will Morgan <will.morgan at iproov.com> ---
Further to this, detecting this behaviour is extremely difficult if not impossible, which means it is impossible to provide a progressive enhancement workaround.

Using Safari 14, inside an iframe, DeviceMotionEvent and DeviceMotionEvent.requestPermission both exist and the latter is callable.

This means that the only way developers can work around this is to block ALL PREVIOUS, CURRENT AND FUTURE mobile WebKit browsers inside iframes. There is no way we can supply progressive enhancement scaffolding that provides a workaround that will disappear when or indeed if this bug is fixed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210211/418abd36/attachment.htm>