1579281 - [meta] WebXR needs to ask permission before accessing XR hardware devices

Status: RESOLVED FIXED

(Core :: WebVR, enhancement, P2)

Description

[:kip (Kearwood Gilbert)]

The WebXR spec requires both a user gesture and signal of user intent before providing access to XR (eg, VR and AR headset) displays and sensors.

I propose that such a "signal of user intent" be presented with the same UX as the geolocation API requests. As per the geolocation requests, an indicator will be displayed in the URL bar to inform the user when WebXR sessions are active or have been blocked. When the WebXR API is not in use by the page, no additional indication will occupy the URL bar.

An option to control the sites that have been granted WebXR permissions would be provided on the preference dialogues together with others such as geolocation and webrtc camera access.

When the user is in private browsing mode, the "remember this decision" option will not be enabled, according to the existing behavior for the geolocation prompt.

When the resistfingerprinting pref is enabled, WebXR will be disabled and the prompt will not appear.

Comment 1

[:kip (Kearwood Gilbert)]

NI'ing myself as a reminder to put the text for the dialog into a doc for @jvo's review.

Comment 2

[:kip (Kearwood Gilbert)]

Attachment: Proposed UX for managing access to XR device by specific sites

Comment 3

[:kip (Kearwood Gilbert)]

Attachment: Proposed UX for accessing XR device permission dialogue

Comment 4

[:kip (Kearwood Gilbert)]

Doc with strings sent, clearing self-reminder NI...

Comment 5

[:kip (Kearwood Gilbert)]

Attachment: Proposed UX for XR device permission request

Comment 6

[:kip (Kearwood Gilbert)]

Attachment: Proposed UX for page info dialogue permissions tab

Comment 7

[:kip (Kearwood Gilbert)]

As Firefox desktop is currently only going to be used with Virtual Reality devices (FxR Mobile would be used for AR), I have simplified the text in the dialogues. The text now consistently says "virtual reality devices". FxR Android variants would re-implement this UI with appropriate text for each platform.

Comment 8

[:kip (Kearwood Gilbert)]

Attachment: Allowed.png

Comment 9

[:kip (Kearwood Gilbert)]

Attachment: Allowed_popup.png

Comment 10

[:kip (Kearwood Gilbert)]

Attachment: Blocked.png

Comment 11

[:kip (Kearwood Gilbert)]

Attachment: Blocked_popup.png

Comment 12

[:kip (Kearwood Gilbert)]

Attachment: Page_Info.png

Comment 13

[:kip (Kearwood Gilbert)]

Attachment: Permissions.png

Comment 14

[:kip (Kearwood Gilbert)]

Attachment: Prompt.png

Comment 15

[:kip (Kearwood Gilbert)]

Attachment: Security_And_Privacy.png

Comment 16

[:kip (Kearwood Gilbert)]

Updated screenshots to show simplified text. Now referring to "Virtual Reality" rather than XR, as only Virtual Reality devices will be used by Firefox desktop currently. (Augmented reality devices are all currently standalone hardware, and not tethered to a PC).

Comment 17

[:kip (Kearwood Gilbert)]

All dependencies are done, closing meta bug.