@@ -6,7 +6,7 @@ Status: ED
6
6
Group : dap
7
7
ED : https://w3c.github.io/sensors/
8
8
TR : https://www.w3.org/TR/generic-sensor/
9
- Previous Version : https://www.w3.org/TR/2018/CR -generic-sensor-20180320 /
9
+ Previous Version : https://www.w3.org/TR/2019/WD -generic-sensor-20190307 /
10
10
Editor : Rick Waldron 50572, Bocoup, formerly on behalf of JS Foundation
11
11
Former Editor : Mikhail Pozdnyakov 78325, Intel Corporation, https://intel.com/
12
12
Former Editor : Alexander Shalamov 78335, Intel Corporation, https://intel.com/
@@ -27,6 +27,13 @@ Boilerplate: omit issues-index, omit conformance, omit feedback-header
27
27
Ignored Vars : activated_sensors
28
28
Inline GitHub Issues : yes
29
29
Default Biblio Status : current
30
+ Status Text :
31
+ Further implementation experience is being gathered for the
32
+ [=permission request algorithm=] and specification clarifications
33
+ informed by this experience are being discussed in
34
+ <a href="https://github.com/w3c/sensors/issues/397">GitHub issue #397</a>.
35
+ The group does not expect to advance this specification beyond CR until
36
+ [[PERMISSIONS-REQUEST]] moves beyond incubation.
30
37
</pre>
31
38
<pre class="anchors">
32
39
urlPrefix: https://dom.spec.whatwg.org; spec: DOM
@@ -351,17 +358,6 @@ and defensive programming which includes:
351
358
The judgement on how to communicate to the user the known [[#main-privacy-security-threats|threats]]
352
359
is up to the implementer. The implementation of the [[#mitigation-strategies|mitigations]] is
353
360
mandatory, however.
354
-
355
- The Generic Sensor API and its [=extension specifications=] are agnostic with respect to any user
356
- interface aspects. This specification defines an [[#request-sensor-access|integration point]] to the
357
- Permissions API [[PERMISSIONS]] that implementers can use for [=new information about the user's intent|
358
- explicit or implicit user consenting=] . In addition, implementers are encouraged to use additional
359
- privacy-enhancing mechanisms inline with their product requirements to provide a consistent and
360
- cohesive experience. Such mechanisms can include, for example, global and per-origin access controls,
361
- page info dialogs, location bar indicators, or other disclosure user interface elements.
362
-
363
- The Generic Sensor API provides flexibility to implementers to make user consenting and
364
- disclosure user interface design decisions on a concrete sensor basis as needed.
365
361
</div>
366
362
367
363
[=sensor readings|Sensor readings=] are sensitive data and could become a subject of
@@ -497,9 +493,6 @@ is "visible".
497
493
<h4 id="permissions" oldids="permissioning">Permissions API</h4>
498
494
499
495
Access to [=sensor readings=] are controlled by the Permissions API [[!PERMISSIONS]] .
500
- User agents use a [=new information about the user's intent|number of criteria=]
501
- to grant access to the [=sensor readings|readings=] .
502
- Note that access can be granted without prompting the user.
503
496
504
497
<h3 id="mitigation-strategies-case-by-case">Mitigation strategies applied on a case by case basis</h3>
505
498
@@ -846,6 +839,8 @@ A [=sensor type=] has a [=permission revocation algorithm=].
846
839
1. Invoke [=revoke sensor permission=] with |sensor| as argument.
847
840
</div>
848
841
842
+ A [=sensor type=] has a [=permission request algorithm=] .
843
+
849
844
A [=sensor type=] has a [=set/is empty|nonempty=] [=ordered set|set=] of associated
850
845
[=policy-controlled feature=] tokens referred to as <dfn export>sensor feature names</dfn> .
851
846
@@ -938,8 +933,8 @@ interface Sensor : EventTarget {
938
933
readonly attribute boolean activated;
939
934
readonly attribute boolean hasReading;
940
935
readonly attribute DOMHighResTimeStamp? timestamp;
941
- void start();
942
- void stop();
936
+ undefined start();
937
+ undefined stop();
943
938
attribute EventHandler onreading;
944
939
attribute EventHandler onactivate;
945
940
attribute EventHandler onerror;
@@ -2162,7 +2157,7 @@ The accelerometer feature is selectively enabled for third-party origin by addin
2162
2157
A sensor usage is disabled completely by specifying the feature policy in a HTTP
2163
2158
response header:
2164
2159
<pre highlight="js">
2165
- Feature-Policy: {" accelerometer": []}
2160
+ Feature-Policy: accelerometer 'none'
2166
2161
</pre>
2167
2162
</div>
2168
2163
@@ -2184,9 +2179,9 @@ Here's an example WebIDL for a possible extension of this specification
2184
2179
for proximity [=device sensor|sensors=] .
2185
2180
2186
2181
<pre class=example>
2187
- [Constructor(optional ProximitySensorOptions proximitySensorOptions = {}),
2188
- SecureContext, Exposed=Window]
2182
+ [SecureContext, Exposed=Window]
2189
2183
interface ProximitySensor : Sensor {
2184
+ constructor(optional ProximitySensorOptions proximitySensorOptions = {});
2190
2185
readonly attribute double? distance;
2191
2186
};
2192
2187
0 commit comments