3 ms·
I thought they meant more like sandbox environment. Why would the API to access those things exist at all?
by d0gbread 5y ago
I thought they meant more like sandbox environment. Why would the API to access those things exist at all?
- tehlike 5y agoSandbox is provided through things like ContentSecurityPolicy and Feature Policies. See my comment on this.
- jimbojet 5y agoThe API exists because zoom.com request microphone and camera through an iframe is a legit use case. As OP said below CSPs exist so that enterprises can lock down those vulnerabilities. But wouldn’t make sense to lock it down for all consumers.