Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WG Charter: expand WebAppSec citation #97

Merged
merged 3 commits into from
Jul 20, 2020
Merged

WG Charter: expand WebAppSec citation #97

merged 3 commits into from
Jul 20, 2020

Conversation

xfq
Copy link
Member

@xfq xfq commented Jun 19, 2020

Fix #77.

@xfq xfq requested a review from samuelweiler June 19, 2020 10:14
@xfq xfq added the charter label Jun 19, 2020
@samuelweiler
Copy link
Member

Sorry; this still is not clear to me.

Try with some different words? Feel free to try to explain here or in #77

@xfq
Copy link
Member Author

xfq commented Jul 1, 2020

The following work might need technical coordination between the MiniApps WG and the WebAppSec WG:

  1. There is a reqPermissions array in the manifest spec used for declaring permissions, so it might be related to the work in the Permissions API.

  2. Some sensitive APIs the group might develop in the future (see also Elements and APIs in the charter scope #79) should be gated by a request for user consent and be delivered only in secure contexts, so they might be related to the work in the Permissions API and Secure Contexts specs.

  3. There might be need for fine-grained control over features (there's no plan now, so I'm just guessing), so Feature Policy might be related too.

Is it clear now?

@xfq
Copy link
Member Author

xfq commented Jul 20, 2020

I just modified the text since we do not plan to standardize device APIs for now per https://www.w3.org/2020/07/09-miniapp-minutes.html#t03

Merging this PR. Feel free to reopen #77 (or create a new issue) if you are not content with the text. @samuelweiler

FYI - I also opened an issue about the permission model of MiniApps. See #117.

@xfq xfq merged commit 93aa2b7 into gh-pages Jul 20, 2020
@xfq xfq deleted the xfq/webappsec branch July 20, 2020 03:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Charter: expand WebAppSec citation?
2 participants