Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Potentially specify "prior user interaction" requirement #190

Open
johannhof opened this issue Nov 21, 2023 · 2 comments
Open

Potentially specify "prior user interaction" requirement #190

johannhof opened this issue Nov 21, 2023 · 2 comments
Labels
resolve before graduation These issues need to be resolved before the spec graduates from the CG

Comments

@johannhof
Copy link
Member

If I'm not mistaken, both Safari and Chrome have a "prior user interaction" requirement that will auto-reject SAA calls unless the user has interacted with the requesting site in a top-level context in the last X (I think currently 30) days. Firefox also looks at prior interactions, but only gates its "auto-grant" mechanism for the first 5 embedded sites on it.

If this is shipping in roughly the same shape in two browsers we might want to align the spec on it.

cc @annevk @bvandersloot-mozilla @cfredric
@johannhof johannhof added the resolve before graduation These issues need to be resolved before the spec graduates from the CG label Nov 21, 2023
@johannhof johannhof mentioned this issue Dec 6, 2023
Open
@bvandersloot-mozilla
Copy link
Collaborator

We'd be willing to tighten up the protection to align to a spec change here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
resolve before graduation These issues need to be resolved before the spec graduates from the CG
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@johannhof @bvandersloot-mozilla and others