<html>
    <head>
      <base href="https://bugs.webkit.org/" />
    </head>
    <body><span class="vcard"><a class="email" href="mailto:davide&#64;davidemontersino.com" title="Davide Orazio Montersino &lt;davide&#64;davidemontersino.com&gt;"> <span class="fn">Davide Orazio Montersino</span></a>
</span> changed
              <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - [Privileged Contexts] Enable opt-in to DeviceOrientation and DeviceMotion for HTTPS-based iframes"
   href="https://bugs.webkit.org/show_bug.cgi?id=152299">bug 152299</a>
        <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">CC</td>
           <td>
               &nbsp;
           </td>
           <td>davide&#64;davidemontersino.com
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - [Privileged Contexts] Enable opt-in to DeviceOrientation and DeviceMotion for HTTPS-based iframes"
   href="https://bugs.webkit.org/show_bug.cgi?id=152299#c13">Comment # 13</a>
              on <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - [Privileged Contexts] Enable opt-in to DeviceOrientation and DeviceMotion for HTTPS-based iframes"
   href="https://bugs.webkit.org/show_bug.cgi?id=152299">bug 152299</a>
              from <span class="vcard"><a class="email" href="mailto:davide&#64;davidemontersino.com" title="Davide Orazio Montersino &lt;davide&#64;davidemontersino.com&gt;"> <span class="fn">Davide Orazio Montersino</span></a>
</span></b>
        <pre>(In reply to <a href="show_bug.cgi?id=152299#c12">comment #12</a>)
<span class="quote">&gt; It's really not the prerogative of the site author to decide if device
&gt; status should be shared cross-domain.</span >

I think it is - Enabling specific domains to access gyroscope data doesn't seem like a security threat.

The website owner could anyways share gyroscope data cross domain (i.e. web sockets).

The proposed solution of 'allow-device-sensors' attribute would allow fine grained control from website owners.</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>