search

WICG / display-locking

A repository for the Display Locking spec
Other
297 stars 25 forks source link

renderPriority and iframes #208

Open antosart opened 3 years ago

antosart commented 3 years ago

I was wondering whether the new renderPriority attribute will have effects on iframes (either because it is set on the iframe element itself or because it is inherited from an ancestor element). If so, could this have security/privacy implications? By assigning different renderPriority to different iframes, you could get rendering timing information about a (possibly cross-origin) iframe.

vmpstr commented 3 years ago

I think this is a fair point. My initial thoughts is that we would either allow rendering to happen in iframes or we wouldn't. I don't think we would be able to enforce something like background priority for iframes (especially cross origin)

antosart commented 3 years ago

Ok. I think it would be good to spell out in the explainer how iframes would behave w.r.t. this attribute.

chrishtr commented 3 years ago

I think we should definitely let renderPriority affect iframes, since some content needs to be put in iframes and it's still a legitimate use case to pre-render iframe content.

That being said, we should work carefully through appropriate mitigations for priviacy and security as necessary.