In issue 625044 we disabled all vibration in cross-origin iframes. Although rare, we now believe there are some legitimate use cases where this could be enabled by default (without requiring a feature-policy opt-in), while preserving most of the value of the intervention.
Public standards discussion is here: https://github.com/WICG/interventions/issues/25
binlu@ is working on a particular mitigation to allow vibration after the frame has received a user gesture here: https://codereview.chromium.org/2642263006/
Comment 1 by rbyers@chromium.org
, Jan 23 2017