Re: WebAPI Security Discussion: Screen Orientation

2012-04-18 Thread Lucas Adamski
Updated proposal per comments. I ended up trying to reconcile the various points more than simply documenting them so please review carefully as I likely missed something. :) Name of API: Screen Orientation Reference: bug 720794 bug 673922 Brief purpose of API: Get notification when screen ori

Re: WebAPI Security Discussion: Screen Orientation

2012-04-11 Thread Jonas Sicking
On Wed, Apr 11, 2012 at 3:33 PM, Lucas Adamski wrote: > On Apr 10, 2012, at 9:07 PM, Jonas Sicking wrote: > >> On Tue, Apr 10, 2012 at 4:59 PM, Lucas Adamski wrote: >>> >>> == Regular web content (unauthenticated) == >>> Use cases for unauthenticated code: Prevent screen orientation from >>> cha

Re: WebAPI Security Discussion: Screen Orientation

2012-04-11 Thread Lucas Adamski
On Apr 10, 2012, at 9:07 PM, Jonas Sicking wrote: > On Tue, Apr 10, 2012 at 4:59 PM, Lucas Adamski wrote: >> >> == Regular web content (unauthenticated) == >> Use cases for unauthenticated code: Prevent screen orientation from changing >> when playing a game utilizing device motion > > I'd als

Re: WebAPI Security Discussion: Screen Orientation

2012-04-11 Thread Adrienne Porter Felt
On Tue, Apr 10, 2012 at 9:07 PM, Jonas Sicking wrote: > On Tue, Apr 10, 2012 at 4:59 PM, Lucas Adamski > wrote: > > > Authorization model for normal content: implicit for detecting > orientation, explicit runtime for locking orientation > > I'm not sure what "explicit runtime for locking" enta

Re: WebAPI Security Discussion: Screen Orientation

2012-04-11 Thread Jonas Sicking
On Wed, Apr 11, 2012 at 1:35 AM, JOSE MANUEL CANTERA FONSECA wrote: > El 11/04/12 06:07, "Jonas Sicking" escribió: > >> >>4. If the page isn't in fullscreen mode, and is contained in an >> (or ) never allow the lock request. > > Currently Gaia and OWD Apps run in independent iframes which are chi

Re: WebAPI Security Discussion: Screen Orientation

2012-04-11 Thread JOSE MANUEL CANTERA FONSECA
El 11/04/12 06:07, "Jonas Sicking" escribió: > >4. If the page isn't in fullscreen mode, and is contained in an > (or ) never allow the lock request. Currently Gaia and OWD Apps run in independent iframes which are children of the top level browsing context ... Thus I think here we have a proble

Re: WebAPI Security Discussion: Screen Orientation

2012-04-10 Thread Jonas Sicking
On Tue, Apr 10, 2012 at 4:59 PM, Lucas Adamski wrote: > Here's the first API up for discussion.  This should be pretty > straightforward so I hope to close out this discussion by > end of day Thursday (PDT). > > I'd like to keep this discussion on mozilla.dev.webapps, but I'll take > responses o

WebAPI Security Discussion: Screen Orientation

2012-04-10 Thread Lucas Adamski
Here's the first API up for discussion. This should be pretty straightforward so I hope to close out this discussion by end of day Thursday (PDT). I'd like to keep this discussion on mozilla.dev.webapps, but I'll take responses on other lists over silence. :) Name of API: Screen Orientation Re