w3c / web-share-target

Web API proposal for receiving shared data
https://w3c.github.io/web-share-target/
Other
192 stars 20 forks source link

Properly define the secure context requirement #27

Closed mgiuca closed 6 years ago

mgiuca commented 6 years ago

A web share target is defined as "a web site in a secure context".

We need to more precisely define this requirement. Note that the secure context algorithm is defined over an environment settings object, not a URL. We need to block share targets that are specified from a non-secure manifest OR those whose final URL is non-secure.