w3c / strategy

team-strat, on GitHub, working in public. Current state: DRAFT
158 stars 46 forks source link

Standard for acquiring user permission for CORS override #212

Open dellagustin opened 4 years ago

dellagustin commented 4 years ago

When confronting native applications with Progressive Web Apps, I see one disadvantage on PWAs that is impossible to overcome without a dedicated server to serve as proxy.

Native applications are free to perform web requests to any domain, while PWAs are limited by Cross Origin Resource Sharing checks performed by the browser.

Although this has a security reasoning behind it, it would be good to try to produce a standard that would allow Web Applications to consume resources from other domains in the same way a native application would.

One idea would be to implement something similar to the permissions API used by Chrome Extensions, where PWAs would request permissions to access resources.

Include some links here:

Example Use Cases: