Version: 55
OS: Android

Web Share origin trial can be remotely disabled via the origin trials server itself. However, this only disables it in the renderer.

There is no server-controlled way to disable the Mojo service, which means a compromised renderer could talk directly to the WebShare service and create shares. If a WebShare browser-side vulnerability is discovered in the wild (e.g., a major Android app is being trivially compromised by a share payload), we would ideally have a way to remotely disable the Mojo service as well.

This is a low priority because it is just a mitigation for a combined renderer compromise + potential security bug in WebShare itself.