search

immersive-web / webvr-polyfill

Use WebVR today, without requiring a special browser build.
http://immersive-web.github.io/webvr-polyfill/examples/
Apache License 2.0
1.4k stars 325 forks source link

allow disabling dpdb-fetch #92

Closed gmarinov closed 8 years ago

gmarinov commented 8 years ago

there used to be a WebVRConfig.NO_DPDB_FETCH , no?

borismus commented 8 years ago

Yes, but why would you not want to fetch the DBDP?

gmarinov commented 8 years ago

1 at Vizor, i'd like us to fetch it manually when we see fit: we get a chance to examine the contents, and a better idea of what parameters our visitors use, without seeking runtime access to their browsers for this purpose 2 it gives away information to a third party 3 in extreme cases it's an attack vector 4 in a complex technical design such as ours, it's one more thing that can fail