Re: [blink-dev] Re: Intent to Experiment: Digital Goods API v2.0

2021-10-11 Thread Glen Robertson
Yes, we are planning to disallow delegation before shipping. This was discussed in the privacy review on the launch bug . On Tue, 12 Oct 2021 at 14:13, 'Matt Menke' via blink-dev < blink-dev@chromium.org> wrote: > All intent emails -

[blink-dev] Re: Intent to Experiment: Digital Goods API v2.0

2021-10-11 Thread 'Matt Menke' via blink-dev
All intent emails - including experiment, are reviewed for potential privacy and security issues. If this is keyed on frame origin, delegating to cross-origin iframes is a cross-site tracking vector. If cross-origin iframes have access to it, but keyed on top frame origin rather than iframe

[blink-dev] Re: Intent to Experiment: Digital Goods API v2.0

2021-10-11 Thread Glen Robertson
In Chrome, the feature is controlled by the "payment" feature policy, and is therefore unavailable except in top-level context or when explicitly delegated to subframes (we are planning to disallow delegation too). Digital products

[blink-dev] Intent to Implement and Ship: Feature policy for Keyboard API

2021-10-11 Thread 'Anupam Snigdha' via blink-dev
Contact emails sni...@microsoft.com Explainer https://github.com/WICG/keyboard-map/issues/38 Specification https://wicg.github.io/keyboard-map/#permissions-policy Summary getLayoutMap() used in conjunction with code solves the problem of identifying the actual

Re: [blink-dev] Re: Intent to Ship: HTTP->HTTPS redirect for HTTPS DNS records

2021-10-11 Thread Mike West
LGTM1. I've reviewed the Fetch PR, and while I think there's work to do to explain exactly how this work, I think we're in a good place to land initially. Thanks for putting the patch together, and good luck getting this out the door. -mike On Fri, Oct 8, 2021 at 4:55 PM Eric Orth wrote: >

[blink-dev] Intent to Ship: Standardize existing client hint naming

2021-10-11 Thread Ari Chivukula
Contact emails aric...@chromium.org, jadekess...@chromium.org, miketa...@chromium.org Design Doc https://docs.google.com/document/d/1yhVLyEIpDhhDQf698WkvXBiPcLwxEgCBI4o1FjvXwfM/edit Specification https://wicg.github.io/client-hints-infrastructure/

[blink-dev] Action Required: You're invited to BlinkOn 15 in 2H 2021!

2021-10-11 Thread Shauna Mendelow
If you have already registered for BlinkOn 15 , thanks for your interest and you can stop reading now. *TLDR: *Save the date and REGISTER NOW for BlinkOn 15 -

Re: [blink-dev] Intent to Ship: CSS font-synthesis property

2021-10-11 Thread Philip Jägenstedt
Thanks for confirming, Munira! Sounds like this is pretty well tested, and Chrome will pass almost all of the tests. Regarding small-caps, the tables on MDN can definitely be wrong, I've sent https://github.com/mdn/browser-compat-data/pull/12782 to fix the Safari support here. Finally, if