This shows up in many features where extensibility points can't be implemented (e.g. Payment Request Handler). This makes it an even further franken-browser. But we also lack worklets. This puts pressure on us not to design features the right way, which is *bad*. [3/N]
-
-
Replying to @slightlylate @AutomatedTester and
Perhaps most importantly, fidelity is low and the expansion of possible attack surface area is high. WebKit is tough from a security perspective (we can't add our own sandbox or process model!), exacerbating it via this channel is tougher still. [4/N]
1 reply 0 retweets 2 likes -
Replying to @slightlylate @AutomatedTester and
In the usual usage model for webviews, you're running 1p content and/or take responsibility for content you run (think of it like adding a 3p script to your site). Very different model to arbitrary untrusted content (which is what browsers specialise in). [5/N]
1 reply 0 retweets 1 like -
Replying to @slightlylate @AutomatedTester and
Features that get added this way have to try to emulate WebIDL semantics, which is *super* tricky. And slow. [6/N]
2 replies 0 retweets 2 likes -
Replying to @slightlylate @AutomatedTester and
Cordova features didn't need to hold themselves to the same semantics bar. The design language there wasn't WebIDL, and doing a slightly different thing was OK...the developer was entirely awares, after all. Not so on the web. Everywhere we diverge from spec is a bug. [7/N]
1 reply 0 retweets 5 likes -
Replying to @slightlylate @AutomatedTester and
For all of these reasons, plus unease w/ adding a broken browser to ecosystem, I recommended we steer away from this approach. A tough call, but Apple must be on notice. We see the damage they're causing and won't paper over it while having to play by unfair rules. [FIN]
1 reply 0 retweets 13 likes -
Replying to @slightlylate @AutomatedTester and
What does it mean for Apple to be on notice?
2 replies 0 retweets 3 likes -
-
I'd like to put both of you "on notice" :-P.
1 reply 0 retweets 0 likes -
Replying to @BrendanEich @wycats and
I'm already on notice for insufficient
@tc39 attendance.1 reply 0 retweets 1 like
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
& Web Standards TL; Blink API OWNER
Named PWAs w/
DMs open. Tweets my own; press@google.com for official comms.