Closed Bug 1835415 Opened 1 years ago Closed 1 years ago

Breakage caused by permission policies for Web Share API usage in iFrames

Categories

(Web Compatibility :: Knowledge Base, defect)

defect

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: ksenia, Unassigned)

References

Details

User Story

url:sway.office.com/*
url:code.or.jp/*
url:myanimelist.net/*
url:snapcraft.io/*
url:www.moviedle.app/*

Symptoms:

  • Users are unable to use a Share button on websites
  • Users are unable to use YouTube's share button for embedded videos

Solutions:

Notes:
While the standard is not finished yet, adding the allow="web-share" attrubute to the iFrame makes it work in all browsers.
web-share permission should be limited by default according to the spec: https://github.com/w3c/web-share/pull/252. The default allowlist is 'self'. This behaviour is now the same across all browsers.

User Story: (updated)

While the standard is not finished yet

The spec now says that web-share permission should be limited by default: https://github.com/w3c/web-share/pull/252

It's shipped in Blink in February 2023, so the behavior is now same: https://github.com/web-platform-tests/interop/issues/34#issuecomment-1299555415

(In reply to Kagami [:saschanaz] from comment #1)

While the standard is not finished yet

The spec now says that web-share permission should be limited by default: https://github.com/w3c/web-share/pull/252

It's shipped in Blink in February 2023, so the behavior is now same: https://github.com/web-platform-tests/interop/issues/34#issuecomment-1299555415

Thanks for the update, Kagami. I've changed the description.
Given that the default policy is now the same as in Safari and Chrone, wonder if we can close bug1737541? I've checked a few linked webcompat issues with embedded youtube videos and sharing works as expected.

Flags: needinfo?(krosylight)

Yup, just closed it 👍

Flags: needinfo?(krosylight)

Thanks! I'll close this bug as well :)

Status: NEW → RESOLVED
Closed: 1 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.