I wanted to comment on the wording. You mention "testing and development purposes" but I feel it will need to be used in production as well since developers that want to allow users to use old devices that cannot be updated to return a list of whitelisted sites will need this.

An example of a device is joysticks for websites that offer web based games.

This issue is obsolete as Chrome now allows top-level documents to access any device.