Skip to content

Commit

Permalink
More work on the privacy section. (#138)
Browse files Browse the repository at this point in the history
- Remove the focus part of the spec, it's not implemented anyway.
- Link the IDL section when covering the secure context.
- Link the posture change steps for the visibility part.

Closes #53
  • Loading branch information
darktears committed Mar 15, 2024
1 parent 000328f commit c9fa5db
Showing 1 changed file with 7 additions and 21 deletions.
28 changes: 7 additions & 21 deletions index.html
Original file line number Diff line number Diff line change
Expand Up @@ -190,7 +190,7 @@ <h3>
</table>
</section>
<section data-dfn-for="Navigator">
<h2>
<h2 id="extensions-to-the-navigator-interface">
Extensions to the `Navigator` interface
</h2>
<p>
Expand Down Expand Up @@ -606,25 +606,10 @@ <h4>
<p>
Posture value readings are explicitly flagged by the Secure
Contexts specification as a high-value target for network
attackers. Thus all interfaces defined by this specification or
extension specifications are only available within a secure
context.
</p>
</section>
<section>
<h4>
Focused Area
</h4>
<p>
Posture value readings are only available for each
[=navigable/active document=] whose origin is the same
origin-domain with the currently focused area {{Document}}.
</p>
<p>
This is done in order to mitigate the risk of a skimming attack
against the browsing context containing an element which has gained
focus, for example when the user carries out an in-game purchase
using a third party payment service from within an iframe.
attackers. {{DevicePosture}} has the {{SecureContext}}
extended attribute in its declaration, and so does the
addition to the {{Navigator}} interface
([[[#extensions-to-the-navigator-interface]]]).
</p>
</section>
<section>
Expand All @@ -634,7 +619,8 @@ <h4>
<p>
Posture value change events are only fired for each
[=navigable/active document=] whose [=Document/visibility state=]
is "visible", and polling the value while that is not the case,
is "visible" as explained in [=device posture change steps=],
and polling the value while that is not the case,
will return a stale value as the value is only updated while the
visibility state is "visible" or just changed to "visible".
</p>
Expand Down

0 comments on commit c9fa5db

Please sign in to comment.