Autoplay Policy Detection 2023-01-26

[alastor0325]

The Privacy IG prefers groups to complete a self-review around the time of FPWD. See https://w3ctag.github.io/security-questionnaire/.

If you still want us to review your spec, please provide the information below.

In the issue title above add the document name followed by the date of this request.

• name of spec to be reviewed
  Autoplay Policy Detection
• URL of spec:
  https://www.w3.org/TR/autoplay-detection/
• In-line Privacy Considerations section:
  https://www.w3.org/TR/autoplay-detection/#security-and-privacy
• Do you need a reply by a particular date?
  No
• Self-review:
  https://github.com/w3c/autoplay/blob/main/security-privacy-questionnaire.md
• Where and how to file issues arising?
  https://github.com/w3c/autoplay/issues/

Other comments:
Thanks!

[pes10k]

I've filed two "needs resolution" issues as part of this review. I'm going to close the review out

• Spec should document fingerprinting and XSLeak risk w3c/autoplay#42
• notifying the site of a browser intervention can be user harming w3c/autoplay#43