search

w3c / web-share

Web API proposal for sharing data from a web page
https://www.w3.org/TR/web-share/
Other
353 stars 65 forks source link

Suggesting preview for security should mention accessibility #264

Closed chaals closed 1 year ago

chaals commented 1 year ago

The security considerations for the share method include the following suggestion:

Content that is previewed and authorized by a user might be safe to forward, however it is not always possible for a person to identify when information should be confidential, so forwarding any content presents a risk. In particular, the title might be used by an attacker to trick a user into misinterpreting the nature of the content.

As well as pointing out that title can be used to mislead, it would make sense to point to the accessibility considerations, and/or note that if such preview methods are not designed for high quality accessibility the proposed mitigation of security will fail.

marcoscaceres commented 1 year ago

Expanded on the accessibility of the share sheet. https://github.com/w3c/web-share/pull/270 ... @chaals, can you take a look and let me know if what I added addresses the issue?

Unfortunately, the share sheet is often outside the scope of the browser (i.e., OS provided widget), so the user agent might have any influence or control over the presentation and accessibility aspects of the share sheet. Irrespective, it's helpful to list these guidelines as hopefully OS engineers + OS UX/UI designers will also hopefully read them...