[Webkit-unassigned] [Bug 243389] Extensions Manifest geolocation permission not respected

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Jul 31 22:39:28 PDT 2022


https://bugs.webkit.org/show_bug.cgi?id=243389

--- Comment #3 from Michael Flores <mike at michaelflores.io> ---
Thank you for the response Marcos. I know this is sort of set in stone, but I just want to register a respectful dissent here. Native applications are allowed to request a one-time permission for location and seamlessly utilize that permission thereafter. Chrome allows informed user consent to geolocation at the time of installation of an extension. Safari extensions are at a disadvantage here: an extension can declare in manifest that it uses geolocation, but the use of this permission won't be shown prior to install or allow a consent at install, and thereafter once per day (at best, if a user checks the box) a user will have to re-consent. For something like a weather widget for example, it's a rather non-ideal UX. I understand you're saying the intent is to keep it private as much as possible, but put next to how native applications are treated in macOS it doesn't quite square. Either macOS applications are less private than Safari extensions or Safari is overbearing here. Hopefully this can be revised or improved in the future.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220801/b3cf1b7b/attachment.htm>


More information about the webkit-unassigned mailing list