WICG / capability-delegation

An API to allow developers transfer the ability to use restricted APIs to any target window in the frame tree.
Other
14 stars 7 forks source link

How does this work with permission-gated capabilities and permission prompts? #6

Closed andypaicu closed 3 years ago

andypaicu commented 3 years ago

What happens if the frame delegating the capability does not have the necessary permission to actually use it? In the case of subframe the usage seems close enough to permission/feature delegation but when it comes to popup windows this delegation seems confusing.

Would it be reasonable to enforce that the top-level frame can only delegate capabilities that it already has the permission to make use of?

andypaicu commented 3 years ago

Closing as duplicate of https://github.com/WICG/capability-delegation/issues/3