Revision 1553cb43af08443e2d04a01bd6925db002234174 authored by Ian Clelland on 28 September 2017, 19:28:02 UTC, committed by Chromium WPT Sync on 28 September 2017, 19:28:02 UTC
This CL disables Web Bluetooth by rejecting the requestDevices call if
disallowed by feature policy.

Web Bluetooth is allowed by default in the top level frame, and in its
same-origin children, and disallowed by default in cross-origin child
frames. To enable in a particular cross-origin iframe, use the allow
attribute, like:

    <iframe src="https://..." allow="bluetooth"></iframe>

To block blueooth in a same-origin frame, specify 'none' as an origin
list in the allow attribute:

    <iframe src="https://..." allow="bluetooth 'none'"></iframe>

Or include a Feature-Policy HTTP header with a document which either
allows Web Bluetooth in certain origins:

    Feature-Policy: bluetooth 'self' https://example.com

or in all frames:

    Feature-Policy: bluetooth '*'

or disallows it completely:

    Feature-Policy: bluetooth 'none'

Bug: 518042
Change-Id: I44767f3f65065e9fe0d84a051d4a6b503b439b89
1 parent 37f4e33
History
File Mode Size
.well-known
2dcontext
FileAPI
IndexedDB
WebCryptoAPI
WebIDL
XMLHttpRequest
accelerometer
ambient-light
annotation-model
annotation-protocol
annotation-vocab
apng
assumptions
audio-output
background-fetch
battery-status
beacon
bluetooth
clear-site-data
clipboard-apis
common
compat
conformance-checkers
console
content-security-policy
cookies
core-aam
cors
credential-management
css
css-backgrounds
css-cascade
css-font-loading
css-fonts
css-paint-api
css-scoping
css-timing
css-typed-om
cssom
cssom-view
custom-elements
docs
dom
domparsing
domxpath
dpub-aam
dpub-aria
editing
encoding
encrypted-media
eventsource
ext-xhtml-pubid
feature-policy
fetch
fonts
fullscreen
gamepad
generic-sensor
geolocation-API
gyroscope
hr-time
html
html-imports
html-longdesc
html-media-capture
http
imagebitmap-renderingcontext
images
infrastructure
innerText
input-events
interfaces
intersection-observer
js
keyboard-lock
longtask-timing
magnetometer
mathml
media
media-capabilities
media-source
mediacapture-fromelement
mediacapture-image
mediacapture-record
mediacapture-streams
mediasession
mixed-content
navigation-timing
netinfo
notifications
offscreen-canvas
old-tests
orientation-event
orientation-sensor
page-visibility
paint-timing
payment-handler
payment-method-basic-card
payment-method-id
payment-request
performance-timeline
pointerevents
pointerlock
preload
presentation-api
progress-events
proximity
quirks-mode
referrer-policy
remote-playback
resource-timing
resources
screen-orientation
scroll-anchoring
secure-contexts
selection
selectors
server-timing
service-workers
shadow-dom
speech-api
staticrange
storage
streams
subresource-integrity
svg
svg-aam
tools
touch-events
trusted-types
uievents
upgrade-insecure-requests
url
user-timing
vibration
viewport
wai-aria
wasm
web-animations
web-nfc
web-share
webaudio
webauthn
webdriver
webgl
webmessaging
webrtc
websockets
webstorage
webusb
webvr
webvtt
workers
worklets
x-frame-options
.codecov.yml -rw-r--r-- 66 bytes
.gitignore -rw-r--r-- 182 bytes
.gitmodules -rw-r--r-- 519 bytes
.travis.yml -rw-r--r-- 4.3 KB
CONTRIBUTING.md -rw-r--r-- 1.6 KB
LICENSE.md -rw-r--r-- 5.1 KB
README.md -rw-r--r-- 13.8 KB
check_stability.ini -rw-r--r-- 524 bytes
config.default.json -rw-r--r-- 762 bytes
lint.whitelist -rw-r--r-- 45.5 KB
serve.py -rw-r--r-- 263 bytes
server-side.md -rw-r--r-- 8.1 KB
testharness_runner.html -rw-r--r-- 95 bytes
update-built-tests.sh -rwxr-xr-x 131 bytes
wpt -rwxr-xr-x 95 bytes
wpt.py -rw-r--r-- 15 bytes

README.md

back to top