MicrosoftEdge / MicrosoftEdge/MSEdgeExplainers

[Web Install] Cross-origin case w/o manifest shouldn't be able to assign an arbitrary manifest_id

Open
#864 0 comments 0 reactions 1 assignee View on GitHub

@diekus is already working on this.

Since Sep 12, 2024.

Web Install API
Dominant language
HTML
Stars
1.4k
Forks
286
Avg merge
3d 1h
Merged PRs (30d)
8

Description

I see a discussion from @dmurph in https://docs.google.com/document/d/19dad0LnqdvEhK-3GmSaffSGHYLeM0kHQ_v4ZRNBFgWM/edit that sites should be installable without a manifest, and therefore the install() API should require an app ID. I think that interacts badly with the cross-origin install API, where the other origin shouldn't be able to assign an arbitrary ID without the installed site's consent.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.