[prev in list] [next in list] [prev in thread] [next in thread] 

List:       webkit-dev
Subject:    [webkit-dev] WebKit team feedback on proposal to limit registerProtocolHandler API to secure context
From:       Eric Lawrence <elawrence () chromium ! org>
Date:       2019-11-20 17:12:42
Message-ID: CANhz9aBe5cZYVjjmn4ymLs+94CABKLjRViFuanfCuSwLv6CHuw () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


The Blink team has requested that I inquire whether the WebKit team has a
point-of-view about the upcoming change to limit HTML's
registerProtocolHandler API to use from secure contexts:
https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/1AOWqzgFQiw.
This will disallow use of that API from non-secure (HTTP) contexts.

As I understand it, Safari does not implement the registerProtocolHandler
API. In the past, WebKit contained the IDL for the API in
(WebCore::NavigatorContentUtils::registerProtocolHandler),
but this was removed earlier this year:
https://trac.webkit.org/changeset/243433/webkit.

Would anyone from WebKit like to express support or objection to the Blink
I2I?

[Attachment #5 (text/html)]

<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div \
dir="ltr"><div>The Blink team has requested that I inquire whether the WebKit team \
has a point-of-view about the upcoming change to limit HTML&#39;s \
registerProtocolHandler API to use from secure contexts:  <a \
href="https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/1AOWqzgFQiw">https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/1AOWqzgFQiw</a>. \
This will disallow use of that API from non-secure (HTTP) \
contexts.</div><div><br></div><div><div>As I understand it, Safari does not implement \
the registerProtocolHandler API. In the past, WebKit contained the IDL for the API in \
<span style="color:rgb(0,0,0);font-family:Verdana,Arial,&quot;Bitstream Vera \
Sans&quot;,Helvetica,sans-serif;font-size:10.4px">(WebCore::NavigatorContentUtils::</span><span \
class="gmail-searchword0" \
style="background:rgb(255,255,153);color:rgb(0,0,0);font-family:Verdana,Arial,&quot;Bitstream \
Vera Sans&quot;,Helvetica,sans-serif;font-size:10.4px">registerProtocolHandler),</span></div><div>but \
this was removed earlier this year:  <a \
href="https://trac.webkit.org/changeset/243433/webkit">https://trac.webkit.org/changeset/243433/webkit</a>.</div><div><br></div><div>Would \
anyone from WebKit like to express support or objection to the Blink \
I2I?</div><div></div></div></div></div></div></div></div></div>



_______________________________________________
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev


[prev in list] [next in list] [prev in thread] [next in thread]