-
Notifications
You must be signed in to change notification settings - Fork 2
Issues: w3c/security-review
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
Clarifications for getGamepads
pending
Issue created by the tracker tool and may need to be refined
s:gamepad
https://w3c.github.io/gamepad/
tracker
Security is following a discussion, but doesn't require resolution.
wg:webapps
https://www.w3.org/groups/wg/webapps
#21
opened Feb 18, 2020 by
plehegar
How do connection/disconnection events interact with 'device has been interacted with by the user'?
pending
Issue created by the tracker tool and may need to be refined
s:gamepad
https://w3c.github.io/gamepad/
tracker
Security is following a discussion, but doesn't require resolution.
wg:webapps
https://www.w3.org/groups/wg/webapps
#22
opened Feb 18, 2020 by
plehegar
Make getGamepads API asyncronous to support permission request
close?
pending
Issue created by the tracker tool and may need to be refined
s:gamepad
https://w3c.github.io/gamepad/
tracker
Security is following a discussion, but doesn't require resolution.
wg:webapps
https://www.w3.org/groups/wg/webapps
#23
opened Feb 18, 2020 by
plehegar
Consider context by reference with metadata
pending
Issue created by the tracker tool and may need to be refined
s:json-ld
https://w3c.github.io/json-ld-syntax/
tracker
Security is following a discussion, but doesn't require resolution.
wg:json-ld
https://www.w3.org/groups/wg/json-ld
#24
opened Feb 18, 2020 by
plehegar
PING self review
close?
pending
Issue created by the tracker tool and may need to be refined
s:pub-manifest
https://w3c.github.io/pub-manifest/
tracker
Security is following a discussion, but doesn't require resolution.
wg:pm
https://www.w3.org/groups/wg/pm
wg:publishing
https://www.w3.org/groups/wg/publishing
#25
opened Feb 18, 2020 by
plehegar
Access to magnetometer and potential security & privacy issues
pending
Issue created by the tracker tool and may need to be refined
s:generic-sensor
https://w3c.github.io/sensors/
tracker
Security is following a discussion, but doesn't require resolution.
wg:das
https://www.w3.org/groups/wg/das
#26
opened Feb 18, 2020 by
plehegar
Relation to Permissions API
pending
Issue created by the tracker tool and may need to be refined
s:generic-sensor
https://w3c.github.io/sensors/
tracker
Security is following a discussion, but doesn't require resolution.
wg:das
https://www.w3.org/groups/wg/das
#27
opened Feb 18, 2020 by
plehegar
Privacy - identifying parameters
pending
Issue created by the tracker tool and may need to be refined
s:generic-sensor
https://w3c.github.io/sensors/
tracker
Security is following a discussion, but doesn't require resolution.
wg:das
https://www.w3.org/groups/wg/das
#28
opened Feb 18, 2020 by
plehegar
Javascript 120Hz devicemotion events for high end inertial applications
pending
Issue created by the tracker tool and may need to be refined
s:generic-sensor
https://w3c.github.io/sensors/
tracker
Security is following a discussion, but doesn't require resolution.
wg:das
https://www.w3.org/groups/wg/das
#29
opened Feb 18, 2020 by
plehegar
Expose sensors to workers
pending
Issue created by the tracker tool and may need to be refined
s:generic-sensor
https://w3c.github.io/sensors/
tracker
Security is following a discussion, but doesn't require resolution.
wg:das
https://www.w3.org/groups/wg/das
#30
opened Feb 18, 2020 by
plehegar
Add display hints to data model, for example: information to use a Web Component
close?
pending
Issue created by the tracker tool and may need to be refined
s:vc-data-model
https://w3c.github.io/vc-data-model/
tracker
Security is following a discussion, but doesn't require resolution.
wg:vc
https://www.w3.org/groups/wg/vc
#31
opened Feb 18, 2020 by
plehegar
id field in gamepad might have a persistent identifier?
pending
Issue created by the tracker tool and may need to be refined
s:gamepad
https://w3c.github.io/gamepad/
tracker
Security is following a discussion, but doesn't require resolution.
wg:webapps
https://www.w3.org/groups/wg/webapps
#19
opened Feb 14, 2020 by
plehegar
Security and privacy considerations for DOMHighResTimeStamp resolution
pending
Issue created by the tracker tool and may need to be refined
s:hr-time
https://w3c.github.io/hr-time/
tracker
Security is following a discussion, but doesn't require resolution.
wg:webperf
https://www.w3.org/groups/wg/webperf
#20
opened Feb 14, 2020 by
plehegar
Should security be mandatory on directories for WoT Discovery?
close?
pending
Issue created by the tracker tool and may need to be refined
s:wot-discovery
https://w3c.github.io/wot-discovery/
tracker
Security is following a discussion, but doesn't require resolution.
wg:wot
https://www.w3.org/groups/wg/wot
#68
opened Nov 17, 2020 by
w3cbot
Decide how to securely do notifications from a Directory
pending
Issue created by the tracker tool and may need to be refined
s:wot-discovery
https://w3c.github.io/wot-discovery/
tracker
Security is following a discussion, but doesn't require resolution.
wg:wot
https://www.w3.org/groups/wg/wot
#69
opened Nov 17, 2020 by
w3cbot
Consider how to sign TDs in a directory service
pending
Issue created by the tracker tool and may need to be refined
s:wot-discovery
https://w3c.github.io/wot-discovery/
tracker
Security is following a discussion, but doesn't require resolution.
wg:wot
https://www.w3.org/groups/wg/wot
#70
opened Nov 17, 2020 by
w3cbot
Expand on captureStream() for CORS-cross-origin media data
pending
Issue created by the tracker tool and may need to be refined
s:mediacapture-fromelement
https://w3c.github.io/mediacapture-fromelement/
tracker
Security is following a discussion, but doesn't require resolution.
wg:webrtc
https://www.w3.org/groups/wg/webrtc
#71
opened Nov 30, 2020 by
w3cbot
Origin isolation
moved?
pending
Issue created by the tracker tool and may need to be refined
s:mediacapture-streams
https://w3c.github.io/mediacapture-main/
tracker
Security is following a discussion, but doesn't require resolution.
wg:webrtc
https://www.w3.org/groups/wg/webrtc
#72
opened Nov 30, 2020 by
w3cbot
Normative security requirements ("ISSUE 1")
close?
pending
Issue created by the tracker tool and may need to be refined
s:screen-capture
https://w3c.github.io/mediacapture-screen-share/
tracker
Security is following a discussion, but doesn't require resolution.
wg:webrtc
https://www.w3.org/groups/wg/webrtc
#73
opened Nov 30, 2020 by
w3cbot
IPv4 host parser + site definition seems potentially dangerous.
close?
pending
Issue created by the tracker tool and may need to be refined
s:url
https://url.spec.whatwg.org/
tracker
Security is following a discussion, but doesn't require resolution.
whatwg
https://whatwg.org/
#74
opened Nov 30, 2020 by
w3cbot
Remove Cache-Control and Expires headers from the CORS-safelisted response headers to prevent user tracking
pending
Issue created by the tracker tool and may need to be refined
s:fetch
https://fetch.spec.whatwg.org/
tracker
Security is following a discussion, but doesn't require resolution.
whatwg
https://whatwg.org/
#81
opened Dec 19, 2020 by
w3cbot
[security] API key and PSK security schemes are not referenced or explained
close?
pending
Issue created by the tracker tool and may need to be refined
s:wot-thing-description
https://w3c.github.io/wot-thing-description/
tracker
Security is following a discussion, but doesn't require resolution.
wg:wot
https://www.w3.org/groups/wg/wot
#80
opened Dec 8, 2020 by
w3cbot
The "body" location value for security schemes is underspecified
close?
pending
Issue created by the tracker tool and may need to be refined
s:wot-thing-description
https://w3c.github.io/wot-thing-description/
tracker
Security is following a discussion, but doesn't require resolution.
wg:wot
https://www.w3.org/groups/wg/wot
#84
opened Jan 21, 2021 by
w3cbot
Previous Next
ProTip!
Follow long discussions with comments:>50.