[Webkit-unassigned] [Bug 221399] DeviceMotionEvent.requestPermission is not a function in iframe-hosted cross-origin pages, even with feature policy and allow attributes set

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=221399

--- Comment #6 from Will Morgan <will.morgan at iproov.com> ---
(In reply to Chris Dumez from comment #5)
> As far as I can tell, we are resolving the promise with state="denied".

You are correct - apologies. However IMHO, my point still stands after a slight reformulation:

requestPermission exists and is callable, but it always returns a predetermined denied result. There's been no user interaction; it is impossible to discern between an informed user action and a blanket block.

Site owners can opt-in to camera access on a per-iframe basis, but they cannot do the same for gyroscope access. iOS prompts for device motion and orientation in the same way as camera access is requested, with a modal confirm dialog.

It would be great to be able to tell the user "sorry, your browser isn't supported" versus "we need device motion data, could you please allow it?"

But it would be even better if WebKit could respect the gyroscope and accelerometer feature policies, just like it allows camera and fullscreen access.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210211/8ab2bfcb/attachment.htm>