Due to announced deprecating permissions in cross-origin IFrames

https://sites.google.com/a/chromium.org/dev/Home/chromium-security/deprecating-permissions-in-cross-origin-iframes

every call for geolocation from HtmlService based frame causes a warning in 
Chrome 61:

*[Deprecation] getCurrentPosition and watchPosition usage in cross-origin 
iframes is deprecated and will be disabled in M63, around December 2017.* 
To continue to use this feature, it must be enabled by the embedding 
document using Feature Policy, e.g. <iframe allow="geolocation" ...>. See 
https://goo.gl/EuHzyv 
<https://www.google.com/url?q=https://goo.gl/EuHzyv&sa=D&usg=AFQjCNG_eWs1frYNs2ANe7-YRg2XMDaN6w>
 for 
more details.

In order for a cross-origin frame to use these feature, the Google Script 
HtmlService based frame must specify a Feature Policy which enables the 
feature for the frame. For example, to enable geolocation in an iframe the 
developer should be able to specify the iframe mode in scope of 
HtmlService.XFrameOptionsMode.ALLOWALL.

This new feature requested in the apps script support blog 
<https://issuetracker.google.com/issues/68032861>. You can vote for it.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to