Open Bug 1830200 Opened 1 year ago Updated 1 month ago

Implement Capability Delegation

Categories

(Core :: DOM: Core & HTML, enhancement)

enhancement

Tracking

()

ASSIGNED

People

(Reporter: zcorpan, Assigned: vhilla)

References

(Blocks 4 open bugs)

Details

Attachments

(4 files)

This feature allows delegating a capability that requires user activation to a child frame (possibly cross-origin), e.g. for requestFullscreen.

Spec: https://wicg.github.io/capability-delegation/spec.html
Explainer: https://github.com/WICG/capability-delegation
Mozilla standards-position: https://github.com/mozilla/standards-positions/issues/565

https://chromestatus.com/feature/5708770829139968 - shipping in Chrome 100.

The spec seems incomplete in that it doesn't cover all capabilities that require user activation, e.g. audio playback (depends on autoplay policy). Maybe not all capabilities make sense to delegate though? See https://developer.mozilla.org/en-US/docs/Web/Security/User_activation

This is needed to be able to use user activation-gated features across cross-origin same-site frames without document.domain (which is being removed in Chromium, see https://chromestatus.com/feature/5428079583297536 and for Gecko https://bugzilla.mozilla.org/show_bug.cgi?id=1817844). See https://twitter.com/mutherpluckinb/status/1538852415331500038 for a web dev request for this.

Blocks: 1817844
Blocks: 1577516

Removing 1817844 from "blocks" since Chrome deprecated document.domain without implementing this, and sites can opt out of origin agent clusters until this is implemented.

No longer blocks: 1817844
See Also: → 1817844
Assignee: nobody → vhilla
Status: NEW → ASSIGNED
Blocks: 1724865
Blocks: 1887856
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: