Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change default allowlist to 'all' #156

Merged
merged 7 commits into from
Dec 15, 2023
Merged

Change default allowlist to 'all' #156

merged 7 commits into from
Dec 15, 2023

Conversation

nondebug
Copy link
Collaborator

@nondebug nondebug commented Nov 11, 2021

Closes #155

The following tasks have been completed:

  • Modified Web platform tests (link to pull request)

Implementation commitment:


Preview | Diff


Preview | Diff

@marcoscaceres
Copy link
Member

Linked Webkit bug... I'll see if I can quickly add it.

@marcoscaceres
Copy link
Member

I... think the tests were actually testing 'all', by the looks of it.

index.html Outdated Show resolved Hide resolved
@marcoscaceres marcoscaceres mentioned this pull request Feb 11, 2022
4 tasks
@nondebug
Copy link
Collaborator Author

nondebug commented Apr 2, 2022

Actually, I think the tests expect that cross-origin access will be blocked by default. I uploaded a fix: https://crrev.com/c/3566254

chromium-wpt-export-bot pushed a commit to web-platform-tests/wpt that referenced this pull request Apr 2, 2022
The Gamepad API spec is updated to change the default allowlist
for the "gamepad" permissions policy to '*' (all) instead of 'self'.

w3c/gamepad#156

Change-Id: I087b3f77eebb385d2e2b80c0a19f5f3afedda30e
aarongable pushed a commit to chromium/chromium that referenced this pull request Apr 4, 2022
The Gamepad API spec is updated to change the default allowlist
for the "gamepad" permissions policy to '*' (all) instead of 'self'.

w3c/gamepad#156

Change-Id: I087b3f77eebb385d2e2b80c0a19f5f3afedda30e
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3566254
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Commit-Queue: Matt Reynolds <mattreynolds@chromium.org>
Cr-Commit-Position: refs/heads/main@{#988606}
chromium-wpt-export-bot pushed a commit to web-platform-tests/wpt that referenced this pull request Apr 4, 2022
The Gamepad API spec is updated to change the default allowlist
for the "gamepad" permissions policy to '*' (all) instead of 'self'.

w3c/gamepad#156

Change-Id: I087b3f77eebb385d2e2b80c0a19f5f3afedda30e
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3566254
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Commit-Queue: Matt Reynolds <mattreynolds@chromium.org>
Cr-Commit-Position: refs/heads/main@{#988606}
chromium-wpt-export-bot pushed a commit to web-platform-tests/wpt that referenced this pull request Apr 4, 2022
The Gamepad API spec is updated to change the default allowlist
for the "gamepad" permissions policy to '*' (all) instead of 'self'.

w3c/gamepad#156

Change-Id: I087b3f77eebb385d2e2b80c0a19f5f3afedda30e
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3566254
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Commit-Queue: Matt Reynolds <mattreynolds@chromium.org>
Cr-Commit-Position: refs/heads/main@{#988606}
moz-v2v-gh pushed a commit to mozilla/gecko-dev that referenced this pull request Apr 11, 2022
… to 'all' #156", a=testonly

Automatic update from web-platform-tests
Update WPT for "Change default allowlist to 'all' #156"

The Gamepad API spec is updated to change the default allowlist
for the "gamepad" permissions policy to '*' (all) instead of 'self'.

w3c/gamepad#156

Change-Id: I087b3f77eebb385d2e2b80c0a19f5f3afedda30e
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3566254
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Commit-Queue: Matt Reynolds <mattreynolds@chromium.org>
Cr-Commit-Position: refs/heads/main@{#988606}

--

wpt-commits: 8986d0b7443dee8302ea58ef2e0d97fd7163dfde
wpt-pr: 33483
jamienicol pushed a commit to jamienicol/gecko that referenced this pull request Apr 14, 2022
… to 'all' #156", a=testonly

Automatic update from web-platform-tests
Update WPT for "Change default allowlist to 'all' #156"

The Gamepad API spec is updated to change the default allowlist
for the "gamepad" permissions policy to '*' (all) instead of 'self'.

w3c/gamepad#156

Change-Id: I087b3f77eebb385d2e2b80c0a19f5f3afedda30e
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3566254
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Commit-Queue: Matt Reynolds <mattreynolds@chromium.org>
Cr-Commit-Position: refs/heads/main@{#988606}

--

wpt-commits: 8986d0b7443dee8302ea58ef2e0d97fd7163dfde
wpt-pr: 33483
mjfroman pushed a commit to mjfroman/moz-libwebrtc-third-party that referenced this pull request Oct 14, 2022
The Gamepad API spec is updated to change the default allowlist
for the "gamepad" permissions policy to '*' (all) instead of 'self'.

w3c/gamepad#156

Change-Id: I087b3f77eebb385d2e2b80c0a19f5f3afedda30e
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3566254
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Commit-Queue: Matt Reynolds <mattreynolds@chromium.org>
Cr-Commit-Position: refs/heads/main@{#988606}
NOKEYCHECK=True
GitOrigin-RevId: 9a6593d3bf8eb6c266cd8f186cff28805df529fd
index.html Outdated Show resolved Hide resolved
@nondebug nondebug merged commit 775b8e1 into gh-pages Dec 15, 2023
2 checks passed
webkit-commit-queue pushed a commit to marcoscaceres/WebKit that referenced this pull request Dec 18, 2023
https://bugs.webkit.org/show_bug.cgi?id=230136
rdar://83219098

Reviewed by Youenn Fablet.

Implements "gampad" permission policy defaulting to '*' for the allow list.
This matches Chrome's behavior and is also what's intended to go into the spec:
w3c/gamepad#156

* LayoutTests/http/tests/gamepad/gamepad-allow-attribute.https-expected.txt: Added.
* LayoutTests/http/tests/gamepad/gamepad-allow-attribute.https.html: Added.
* LayoutTests/http/tests/gamepad/resources/gamepad-postmessage.html: Added.
* Source/WebCore/Modules/gamepad/NavigatorGamepad.cpp:
(WebCore::NavigatorGamepad::getGamepads): Deleted.
* Source/WebCore/Modules/gamepad/NavigatorGamepad.h:
* Source/WebCore/html/FeaturePolicy.cpp:
(WebCore::policyTypeName):
(WebCore::processOriginItem):
(WebCore::FeaturePolicy::parse):
(WebCore::FeaturePolicy::allows const):
* Source/WebCore/html/FeaturePolicy.h:

Canonical link: https://commits.webkit.org/272199@main
@marcoscaceres marcoscaceres deleted the allowlist-all branch December 21, 2023 04:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Make permissions policy allow list "all"
2 participants