Arthur, that CL is only for OffscreenCanvas, where we don't have a notion of focus at all. For the regular canvas, you can see here <https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/modules/canvas/canvas2d/canvas_rendering_context_2d.cc;l=214?q=canvas_rendering_context_2d> that we only trigger on focus, as discussed.
Regarding adding the mitigation to the spec, we didn't do it as it does look more like an implementation detail (even in our case, we discussed multiple potential solutions that were satisfactory). I think sticking this to spec would probably be a mistake. That said, I can bring up with the WhatWG and ask if we can maybe add an implementation note that UAs should be aware of not triggering this immediately on all contexts in different origins. Would that address this? []s F. On Tue, Oct 19, 2021 at 11:19 AM Arthur Hemery <ahem...@google.com> wrote: > Hi Aaron! > Security and Privacy review envoy here. There was some confusion as to > what the actual mitigation ended up being. We found in the code the 1-100ms > delay implemented here > <https://chromium-review.googlesource.com/c/chromium/src/+/3064463> but > some people remembered discussion about firing the event when regaining > focus. Can you confirm that it was dropped? > We also discussed including the mitigation mean in the spec and we think > it should be in there. Would it be possible to update the HTML spec? > Thanks, > Arthur > > On Fri, Oct 15, 2021 at 7:59 PM 'Aaron Krajeski' via blink-dev < > blink-dev@chromium.org> wrote: > >> These are a bunch of features, so it'd be nice understand if other >> parties are on board with all of them. >> >> Yes, the original list had extra features that are not included here. >> Namely Conic Curves >> <https://github.com/fserb/canvas2D/blob/master/spec/conic-curve-to.md>, CSS >> Color Input >> <https://github.com/fserb/canvas2D/blob/master/spec/color-input.md> and >> Perspective >> Transforms >> <https://github.com/fserb/canvas2D/blob/master/spec/perspective-transforms.md>. >> These features were removed due to concerns from other parties. Apologies, >> I should have made this clearer in the original email. >> >> Is the TAG on board with all the features we're shipping? >> >> Yes, they are. They asked for some changes to SVG Filters and Text >> modifiers, these changes were taken into account on the spec changes there. >> They also nixed Perspective Transforms and CSS Color Input. >> >> Any link to bugzilla? >> >> No >> >> Both Gecko and WebKit have concerns about some of the features we asked >> signals for. >> >> Gecko pushed back on Perspective Transforms, which was removed from the >> final feature list. They also had pushback on roundRect on that thread, but >> we reached a consensus on the WHATWG pull request >> <https://github.com/whatwg/html/pull/6765>. >> >> WebKit pushed back strongly on Perspective Transforms, which was why it >> was canceled. They had reservations for reset and SVG Filters that were >> addressed the spec changes. >> >> In conclusion, the proposal has changed quite a bit from the intent to >> experiment thread due to addressing concerns from Gecko, Webkit and TAG. At >> this point everything we are shipping has been codified into WHATWG except >> for SVG Filters <https://github.com/whatwg/html/pull/6763>, which is >> close, but still in progress. >> >> Cheers! >> Aaron >> >> On Fri, Oct 15, 2021 at 1:22 AM Manuel Rego Casasnovas <r...@igalia.com> >> wrote: >> >>> >>> >>> On 14/10/2021 23:06, Aaron Krajeski wrote: >>> > *Specification* >>> > Context Lost Event >>> > <https://html.spec.whatwg.org/multipage/indices.html#event-contextlost >>> > >>> > Context Restored Event >>> > < >>> https://html.spec.whatwg.org/multipage/indices.html#event-contextrestored >>> > >>> > Will Read Frequently >>> > < >>> https://html.spec.whatwg.org/multipage/canvas.html#concept-canvas-will-read-frequently >>> > >>> > New Text Modifiers >>> > < >>> https://html.spec.whatwg.org/multipage/canvas.html#canvastextdrawingstyles >>> > >>> > Reset >>> > < >>> https://html.spec.whatwg.org/multipage/canvas.html#dom-context-2d-reset> >>> > RoundRect >>> > < >>> https://html.spec.whatwg.org/multipage/canvas.html#dom-context-2d-roundrect >>> >Conic >>> > Gradient >>> > < >>> https://html.spec.whatwg.org/multipage/canvas.html#dom-context-2d-createconicgradient >>> >Filters >>> > <https://github.com/whatwg/html/pull/6763> (still in progress) >>> >>> These are a bunch of features, so it'd be nice understand if other >>> parties are on board with all of them. >>> >>> > *TAG review status >>> > *Resolution: satisfied >>> > < >>> https://github.com/w3ctag/design-reviews/issues/627#issuecomment-838726027 >>> > >>> >>> Is the TAG on board with all the features we're shipping? >>> >>> > *Interoperability and Compatibility* >>> > Gecko: In development (https://github.com/whatwg/html/issues/5431 >>> > < >>> https://www.chromestatus.com/admin/features/launch/6051647656558592/5?intent=1 >>> >) >>> > Already implemented conic gradient. Okay with willReadFrequently, >>> > transforms and reset. >>> >>> Any link to bugzilla? >>> >>> > *Signals* >>> > Gecko: https://github.com/mozilla/standards-positions/issues/519 >>> > <https://github.com/mozilla/standards-positions/issues/519> >>> > WebKit: >>> > https://lists.webkit.org/pipermail/webkit-dev/2021-May/031833.html >>> > <https://lists.webkit.org/pipermail/webkit-dev/2021-May/031833.html> >>> >>> Both Gecko and WebKit have concerns about some of the features we asked >>> signals for. >>> >>> Could you summarize if they agree on all the things shipped here, or >>> just a few. Or maybe they disagree in some of them. >>> >>> Thanks, >>> Rego >>> >> -- >> You received this message because you are subscribed to the Google Groups >> "blink-dev" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to blink-dev+unsubscr...@chromium.org. >> To view this discussion on the web visit >> https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAPhTwY1OXaX8W_D2nP9XbJopca4zC0RsSHtXkPzhO5HOKhCm2Q%40mail.gmail.com >> <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAPhTwY1OXaX8W_D2nP9XbJopca4zC0RsSHtXkPzhO5HOKhCm2Q%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscr...@chromium.org. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CADp2-T_98B2Q8t98X%3DFR4k2-77OcAaKa_qAmxShdEguWhNEtrA%40mail.gmail.com.
