[Webkit-unassigned] [Bug 274444] New: Credential Management API shouldn't allow method calls on non-fully active docs

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=274444

            Bug ID: 274444
           Summary: Credential Management API shouldn't allow method calls
                    on non-fully active docs
           Product: WebKit
           Version: Other
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: marcosc at apple.com

The following CredentialContainer methods all allow operations if a document is not fully active:

.get()
.store()
.create()
.preventSilentAccess()

However, we probably shouldn't allow that. 

Spec change:
https://github.com/w3c/webappsec-credential-management/pull/230

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240521/db096043/attachment.htm>