Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Inconsistency: different permissions can be optional permissions across browsers #425

Open
bershanskiy opened this issue Jul 19, 2023 · 0 comments
Labels
inconsistency Inconsistent behavior across browsers spec clarification Needs clarification when specified topic: permissions

Comments

@bershanskiy
Copy link
Member

Background

Browsers gate some powerful APIs behind permissions which generate warnings. See Chromium warnings, for example. Extensions also can use manifest.json optional permissions to avoid install-time warnings and instead to request the required permissions as needed, in context which follows the best-practices and the [Principle of least privilege](https://en.wikipedia.org/wiki/Principle_of_least_privilege].

However, not all permissions can be optional (MDN table for reference)

Proposal

Subjectively, I believe that all permissions can and should be optional. Some APIs can be made to throw an error with appropriate explanation or for compatibility reasons turned into no-ops (the APIs exist and pretend to work the way they usually do, but in reality have no effect).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
inconsistency Inconsistent behavior across browsers spec clarification Needs clarification when specified topic: permissions
Projects
None yet
Development

No branches or pull requests

2 participants