Re: Intent to implement: Feature Policy

2018-09-17 Thread Christoph Kerschbaumer
> On Sep 15, 2018, at 12:54 AM, Ehsan Akhgari wrote: > > We also have https://bugzilla.mozilla.org/show_bug.cgi?id=1449501 open to > display the CSP policy, perhaps it might make sense to expose both in > similar ways (or at least for similar contexts, e.g. iframes). FWIW, I filed https://bugz

Re: Intent to implement: Feature Policy

2018-09-14 Thread Ehsan Akhgari
On Fri, Sep 14, 2018 at 2:25 PM Boris Zbarsky wrote: > On 9/14/18 1:58 PM, Andrea Marchesini wrote: > > DevTools bug: No devtools support. > > Seems like devtools might be useful for answering questions like "what > is the feature policy for this page and why?" given the complexity of > feature p

Re: Intent to implement: Feature Policy

2018-09-14 Thread Boris Zbarsky
On 9/14/18 1:58 PM, Andrea Marchesini wrote: DevTools bug: No devtools support. Seems like devtools might be useful for answering questions like "what is the feature policy for this page and why?" given the complexity of feature policy determination (headers, inheritance from parents, etc).

Intent to implement: Feature Policy

2018-09-14 Thread Andrea Marchesini
Summary: FeaturePolicy spec allows developers to enable or disable features (browser features ad APIs) for their website and for 3rd party contexts. FeaturePolicy consists in 3 mayor parts: * a HTTP header with the policy, similar to CSP header * an 'allowed' attribute for HTMLIFrameElements to de