Hi All, Coming back to this as it's now starting to cause Web compatibly issues across both Firefox and SafariTP (both of which implement `'self'`).
I'm still worried that the ability to share files and other content (and even URLs, as we've seen in the past) is quite a powerful feature with security implications. However, we (other implementers) are facing a losing battle with Web compatibly here :( If it's too far gone, could we compromise with a "*" policy. But I'd like to get again get a sense if we can go with 'self'. On Monday, November 2, 2020 at 4:22:58 PM UTC+11 Matt Giuca wrote: > Pinging on this. It's been awhile and I don't think we've seen any update > on it. (Nobody from YouTube responded on the internal bug.) > > Eric, did measurements land and if so, what milestone will we start seeing > results in? > > On Fri, 4 Sep 2020 at 05:06, Chris Harrelson <chri...@chromium.org> wrote: > >> Hi Eric, >> >> Did the analysis relating to Youtube complete? Do you think this will be >> safe to turn on, because the Youtube case was sufficiently special? >> >> Chris >> >> On Sun, Aug 23, 2020 at 10:03 PM Eric Willigers <ericwi...@chromium.org> >> wrote: >> >>> >>> On Friday, August 21, 2020 at 5:15:18 AM UTC+10, Mike West wrote: >>>> >>>> Have you followed up with YouTube internally? As Eric notes, it seems >>>> bad that this broke sharing in Canary. >>>> >>> >>> I have raised a YouTube issue internally, showing how to detect if >>> Feature Policy forbids sharing. >>> >>> >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "blink-dev" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to blink-dev+...@chromium.org. >>> To view this discussion on the web visit >>> https://groups.google.com/a/chromium.org/d/msgid/blink-dev/e554e75c-f1cc-4a68-bac9-a7e8477c916bo%40chromium.org >>> >>> <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/e554e75c-f1cc-4a68-bac9-a7e8477c916bo%40chromium.org?utm_medium=email&utm_source=footer> >>> . >>> >> -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscr...@chromium.org. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/6948552f-e384-461d-a5c5-13cc1fb13775n%40chromium.org.
