Implement Capability Delegation
Categories
(Core :: DOM: Core & HTML, enhancement)
Tracking
()
People
(Reporter: zcorpan, Assigned: vhilla)
References
(Blocks 4 open bugs)
Details
Attachments
(4 files)
This feature allows delegating a capability that requires user activation to a child frame (possibly cross-origin), e.g. for requestFullscreen.
Spec: https://wicg.github.io/capability-delegation/spec.html
Explainer: https://github.com/WICG/capability-delegation
Mozilla standards-position: https://github.com/mozilla/standards-positions/issues/565
https://chromestatus.com/feature/5708770829139968 - shipping in Chrome 100.
The spec seems incomplete in that it doesn't cover all capabilities that require user activation, e.g. audio playback (depends on autoplay policy). Maybe not all capabilities make sense to delegate though? See https://developer.mozilla.org/en-US/docs/Web/Security/User_activation
This is needed to be able to use user activation-gated features across cross-origin same-site frames without document.domain (which is being removed in Chromium, see https://chromestatus.com/feature/5428079583297536 and for Gecko https://bugzilla.mozilla.org/show_bug.cgi?id=1817844). See https://twitter.com/mutherpluckinb/status/1538852415331500038 for a web dev request for this.
Reporter | ||
Comment 1•10 months ago
|
||
Removing 1817844 from "blocks" since Chrome deprecated document.domain
without implementing this, and sites can opt out of origin agent clusters until this is implemented.
Assignee | ||
Comment 2•2 months ago
|
||
Updated•2 months ago
|
Assignee | ||
Comment 3•2 months ago
|
||
Depends on D204343
Assignee | ||
Comment 4•2 months ago
|
||
Depends on D204344
Assignee | ||
Comment 5•2 months ago
|
||
Depends on D204345
Description
•