How about the risk of having API users intentionally creating local APIs? For example, people can implement support for <meta apple-touch-icon> just in Gaia.
I was told this is a concern back in B2G v1.0. On Wed, Jun 17, 2015 at 5:52 AM, Jonas Sicking <[email protected]> wrote: > On Tue, Jun 16, 2015 at 10:33 AM, Bobby Holley <[email protected]> wrote: >> On Tue, Jun 16, 2015 at 10:06 AM, Paul Rouget <[email protected]> wrote: >> >>> What would be the right approach to allow such a feature? >>> Would adding a new permission help? >>> >> Well, it sorta depends on what you're trying to accomplish. browser.html is >> supposed to be creating a web browser using only "the web", right? > > I really hope we're *not* trying to accomplish that. It will probably > never be possible to implement a web browser using just web > technologies. > > A web browser needs the ability to do things like clearing cookies for > arbitrary domains, rendering websites that doesn't want to be iframed, > and grant/deny websites the ability to use geolocation. We don't want > arbitrary websites to be able to do those things. > > / Jonas > _______________________________________________ > dev-platform mailing list > [email protected] > https://lists.mozilla.org/listinfo/dev-platform _______________________________________________ dev-platform mailing list [email protected] https://lists.mozilla.org/listinfo/dev-platform
