Closed annevk closed 7 years ago
The Push API predates [SecureContext]
, so it's just an oversight.
I see that ServiceWorkerRegistration
is also marked as [SecureContext]
, which is a dependency. Neither Chromium's nor Firefox' implementations have been updated, so I wonder if they think it's safe to apply the change?
Semantically this should be [SecureContext]
, we just have to make sure it's Web compatible. I'll figure out if we have a way of measuring this.
/cc @mattto @jakearchibald
I filed https://github.com/heycam/webidl/issues/420 to figure out whether we should also specify this on the interfaces already limited to Service Workers, and thereby secure contexts. It's harmless to add those for now in either case.
Any reason this is not using
[SecureContext]
? Would be good to add a note explaining why.