Fix issue 26048: document security requirements for opening and focus… #26838
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…ing windows from a service worker
sideshowbarker
approved these changes
May 19, 2023
wbamberg
added a commit
to wbamberg/content
that referenced
this pull request
May 20, 2023
… into update-beforeinstallpromptevent * origin/update-beforeinstallpromptevent: Add Prettier to lint command (mdn#20674) Remove SVG <discard> docs (mdn#26856) Remove docs for <applet> (mdn#26850) refactor: migrate media.prod.mdn.mozit.cloud URLs (mdn#26809) chore: Remove embedlivesample macro calls with a fourth parameter (mdn#26816) Bump @mdn/yari from 2.21.0 to 2.22.0 (mdn#26858) WebTransport API (mdn#26529) Fix issue 26739: correct beforeunload situation wrt bfcache (mdn#26819) add missing colon (mdn#26846) Replace reference to time domain with amplitude domain in `AnalyserNode .fftSize` (mdn#26840) Fix issue 26048: document security requirements for opening and focus… (mdn#26838) Change all CSS spec URLs back to drafts.csswg.org (mdn#26833) Synchronize with BCD v5.2.58 (mdn#26829) Rename nonexistent globalScope to globalThis in service worker event examples (mdn#26808) Small typo fix (mdn#26822) removing scrollbar (mdn#26813) Fix typo (mdn#26826)
wbamberg
added a commit
to wbamberg/content
that referenced
this pull request
Jun 1, 2023
* origin/pwa-main-page: (86 commits) Add Prettier to lint command (mdn#20674) Remove SVG <discard> docs (mdn#26856) Remove docs for <applet> (mdn#26850) refactor: migrate media.prod.mdn.mozit.cloud URLs (mdn#26809) chore: Remove embedlivesample macro calls with a fourth parameter (mdn#26816) Bump @mdn/yari from 2.21.0 to 2.22.0 (mdn#26858) WebTransport API (mdn#26529) Fix issue 26739: correct beforeunload situation wrt bfcache (mdn#26819) add missing colon (mdn#26846) Replace reference to time domain with amplitude domain in `AnalyserNode .fftSize` (mdn#26840) Fix issue 26048: document security requirements for opening and focus… (mdn#26838) Change all CSS spec URLs back to drafts.csswg.org (mdn#26833) Synchronize with BCD v5.2.58 (mdn#26829) Rename nonexistent globalScope to globalThis in service worker event examples (mdn#26808) Small typo fix (mdn#26822) removing scrollbar (mdn#26813) Fix typo (mdn#26826) docs(:not()): Update the syntax and example titles (mdn#26814) Add a Performance guide for Server Timing (mdn#25575) Fix a summary (mdn#26815) ...
|
It seems not to be working in the Chrome. (Did not check in other browsers). My scenario was to postMessage to service worker by button.onClick event and change focus to other ClientWindow. And I was still getting "Not allowed to focus a window" exception despite the fact that my current window should theoretically be in Transient Activation state. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Fixes #26048.
Documents security requirements for
WindowClient.focus()andClients.openWindow().I believe that although the bug report quotes a SO answer that the requirement is that the methods may only be called inside a
notificationclickhandler, that's a very old answer, and from the spec it looks as if the requirement is transient activation:https://w3c.github.io/ServiceWorker/#clients-openwindow
https://w3c.github.io/ServiceWorker/#client-focus
I wasn't quite sure what "this origin" means here. I have documented it as "the app's origin" but not sure that is correct.