Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The description of the iframe allow attribute seems wrong? #14882

Closed
greggman opened this issue Apr 11, 2022 · 3 comments
Closed

The description of the iframe allow attribute seems wrong? #14882

greggman opened this issue Apr 11, 2022 · 3 comments
Labels
Content:HTTP HTTP docs

Comments

@greggman
Copy link
Contributor

MDN URL

/en-US/docs/Web/HTTP/Feature_Policy/Using_Feature_Policy

What specific section or headline is this issue about?

Enforcing best practices for good user experiences

What information was incorrect, unhelpful, or incomplete?

To avoid breaking existing web content, the default for such policy-controlled features is to allow the functionality to be used by all origins. That is, the default allowlist is '*' for each feature. Preventing the use of the sub-optimal functionality requires explicitly specifying a policy that disables the features.

What did you expect to see?

AFAICT this is no longer true. For example gamepads are now opt in not opt out

Do you have any supporting links, references, or citations?

w3c/gamepad#112

Do you have anything more you want to share?

No response

MDN metadata

Page report details
@github-actions github-actions bot added the needs triage Triage needed by staff and/or partners. Automatically applied when an issue is opened. label Apr 11, 2022
@sideshowbarker sideshowbarker added Content:HTTP HTTP docs and removed needs triage Triage needed by staff and/or partners. Automatically applied when an issue is opened. labels Apr 11, 2022
@muntiMedia
Copy link

The link is showing broken on my end.

@greggman
Copy link
Contributor Author

which link? This one

https://developer.mozilla.org/en-US/docs/Web/HTTP/Feature_Policy/Using_Feature_Policy

or this one

w3c/gamepad#112

(both from above, both work for me)

@Josh-Cena
Copy link
Member

Feature policy is gone, and the new permissions policy page doesn't seem to make this claim, so I'll assume it's fixed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Content:HTTP HTTP docs
Projects
None yet
Development

No branches or pull requests

4 participants