w3c / mediacapture-handle

https://w3c.github.io/mediacapture-handle/
Other
14 stars 10 forks source link

track.getCaptureHandle() observes navigation even after capture ends #9

Closed jan-ivar closed 2 years ago

jan-ivar commented 2 years ago

The way track.getCaptureHandle() appears defined, the application can observe the user's navigation in the other tab long after tab capture of it has ended.

This is a privacy issue and defies user expectations. Users can forcefully revoke screen capture today in all browsers through browser UX, and would expect this tracking to stop when the track ends.

alvestrand commented 2 years ago

This can be solved by adding "If the track is ended, return null" to the checks. I don't see a reason not to do that.

Again, this does not seem a reasonable concern for blocking adoption.

jan-ivar commented 2 years ago

That would be a reasonable solution, as long as we agree this is not a part of the intended design.

eladalon1983 commented 2 years ago

I implicitly assumed that getCaptureHandle() should stop working after the capture stops. Thank you for bringing up the issue, that it should be mentioned explicitly how it "stops working."

I'll modify the document to return null.

eladalon1983 commented 2 years ago

Done.