Re: [blink-dev] Intent to Prototype: Web Translation API

Hi Domenic, et al., This intent came up in the OWP sec review today. We wonder whether there's XSS potential, and how input with plain text interspersed with tags is meant to be handled: Several of the use cases seem to hint at the input being HTML strings (e.g. "pages with complicated DOM"). If

Re: [blink-dev] Intent to Prototype: Web Translation API

On Tue, 30 Apr 2024 at 18:08, Daniel Vogelheim wrote: > Hi Domenic, et al., > > This intent came up in the OWP sec review today. We wonder whether there's > XSS potential, and how input with plain text interspersed with tags is > meant to be handled: > > Several of the use cases seem to hint at

[blink-dev] Intent to Prototype and Ship: Align navigator.cookieEnabled with spec

Contact emails aric...@chromium.org, johann...@google.com Specification https://html.spec.whatwg.org/multipage/system-state.html#cookies Summary navigator.cookieEnabled currently indicates if “the user agent attempts

[blink-dev] Re: TextFragmentFinder and its related objects cannot be GC?

Thanks for the heads up, I'll take a look On Monday, April 29, 2024 at 8:43:38 AM UTC-4 Bill Shen wrote: > Hi, > I asked an issue here: https://issues.chromium.org/issues/336357543, > but it has not been processed for a long time. > Can anyone take a look? > > Thanks! -- You

Re: [blink-dev] Intent to Ship: Stable Bare Declarations (@nest)

So we are back to the worst possible outcome? :( ☆*PhistucK* On Sat, Apr 27, 2024 at 8:31 AM Anders Hartvoll Ruud wrote: > Oops, I intended to send that e-mail to the list, must have hit "Reply" > instead of "Reply All". > > On Fri, Apr 26, 2024 at 10:45 AM Anders Hartvoll Ruud < >

Re: [blink-dev] Intent to Prototype and Ship: Align navigator.cookieEnabled with spec

On 4/30/24 7:15 AM, Ari Chivukula wrote: Contact emails aric...@chromium.org , johann...@google.com Specification https://html.spec.whatwg.org/multipage/system-state.html#cookies

Re: [blink-dev] Intent to Prototype and Ship: Align navigator.cookieEnabled with spec

Ah good point, thanks. Thanks for your attention to web compat detail here. Really any bug fix has the potential to be a significant breaking change so the line is very context-dependent. Rick On Tue, Apr 30, 2024 at 11:36 AM Ari Chivukula wrote: > We discussed having this be a PSA+fix, but

Re: [blink-dev] Unable to write Serialized SkPicture into a File

Are you trying to do this within Chrome's renderer or GPU processes? If so, the sandbox will prevent you from touching the local disk. You would need to extend the sandbox policies to allow writing to a directory on disk - some place that will not collide with other programs, so that if a bad

Re: [blink-dev] Intent to Prototype and Ship: Align navigator.cookieEnabled with spec

LGTM2 On Tue, Apr 30, 2024 at 6:10 PM Rick Byers wrote: > Ah good point, thanks. Thanks for your attention to web compat detail > here. Really any bug fix has the potential to be a significant breaking > change so the line is very context-dependent. > > Rick > > On Tue, Apr 30, 2024 at 11:36 AM

[blink-dev] Intent to Ship: View Transitions Same-Origin Navigation

Contact emails bo...@google.com, khushalsa...@google.com, nrosent...@google.com, vmp...@google.com Explainer https://github.com/WICG/view-transitions/blob/main/cross-doc-explainer.md

Re: [blink-dev] Intent to Prototype and Ship: Align navigator.cookieEnabled with spec

Seems maybe like we introduced a bug in regressing from expected behavior and this could arguably be handled as a bug-fix? Regardless LGTM1 On Tue, Apr 30, 2024 at 11:32 AM Mike Taylor wrote: > On 4/30/24 7:15 AM, Ari Chivukula wrote: > > Contact emails > > aric...@chromium.org,

Re: [blink-dev] Intent to Prototype and Ship: Align navigator.cookieEnabled with spec

We discussed having this be a PSA+fix, but since developers testing 3PCD have been living in this world for a while and Firefox also has the behavior, it seemed better to go the long route. ~ Ari Chivukula (Their/There/They're) On Tue, Apr 30, 2024 at 11:34 AM Rick Byers wrote: > Seems maybe

[blink-dev] Re: TextFragmentFinder and its related objects cannot be GC?

Hi David, Thanks for attention. I have been troubleshooting this problem for a while, I also modified a part of code, looks like it might fix the problem. Of course, I'm not yet sure if my modification is the best approach. If need more information from me, please contact me. Regards

[blink-dev] Unable to write Serialized SkPicture into a File

Hi I have modified the Serialize method to Record all PaintOp as SKPicture. I want to replay this SKPicture on a remote browser.

Re: [blink-dev] Intent to Prototype and Ship: Align navigator.cookieEnabled with spec

LGTM3 On Tue, Apr 30, 2024 at 6:49 PM Yoav Weiss (@Shopify) < yoavwe...@chromium.org> wrote: > LGTM2 > > On Tue, Apr 30, 2024 at 6:10 PM Rick Byers wrote: > >> Ah good point, thanks. Thanks for your attention to web compat detail >> here. Really any bug fix has the potential to be a significant

Re: [blink-dev] Intent to Prototype: Web Translation API

This effort seems worthwhile, and would like to see an explainer that discisses the various API options; that might provide some context for the security conversation. Best, Alex On Tue, Apr 30, 2024, 2:30 AM 'Fergal Daly' via blink-dev < blink-dev@chromium.org> wrote: > > > On Tue, 30 Apr

RE: [blink-dev] Intent to Ship: Support Video Chapter in MediaMetadata

I was curious about WPT coverage for this and found https://wpt.fyi/results/mediasession/mediametadata.html Maybe that could be updated to check for the basics of the new attribute? -- Dan From: 'Jiaming Cheng' via blink-dev Sent: Tuesday, April 30, 2024 1:50 PM To: blink-dev@chromium.org Cc:

Re: [blink-dev] Intent to Implement and Ship: Conversion to RGB in VideoFrame.copyTo()

> Can you please request reviews for privacy, security, enterprise, etc in the chromestatus entry? Done On Mon, Apr 29, 2024 at 7:44 AM Mike Taylor wrote: > Can you please request reviews for privacy, security, enterprise, etc in > the chromestatus entry? > On 4/25/24 6:19 PM, 'Eugene Zemtsov'

Re: [blink-dev] Unable to write Serialized SkPicture into a File

Yes, trying to do this in renderer process. Would it work if I run Chromium with --nosandbox flag. On Tue, Apr 30, 2024, 21:58 Ken Russell wrote: > Are you trying to do this within Chrome's renderer or GPU processes? If > so, the sandbox will prevent you from touching the local disk. You would

Re: LRe: [blink-dev] Intent to Ship: Used color scheme root scrollbars

Hey another nice bonus with this excellent change is: the YouTube desktop website no longer has to use their dreadful custom scrollbar (see attached screenshot) which has quite a few issues and downsides compared to the standard Chrome scrollbar. Finally they can do away with that and just use