IMPORTANT:- This launch issue is used for standards and implementation tracking only.It is NOT for Chrome approval regarding privacy, security, legal, UI,testing,accessibility etc.- An overview of the different launch issues can be found here:http://bit.ly/2ncKZfp- If your feature requires security / privacy / etc approval then seek a PMto guide you through the go/newchromefeature processSee http://www.chromium.org/blink#launch-process for an overview of theBlink launch process, but note this doesn't cover security / privacy / etcreviews as discussed above.----------Change description:
This change exposes passwords to JavaScript in the Credential Manager API by providing the corresponding attribute on PasswordCredential. Furthermore it deprecates the previously existing PasswordCredential attributes and the custom `fetch()` `credential` infrastructure.
Changes to API surface:
- Introduce PasswordCredential.password
- Deprecate PasswordCredential.idName
- Deprecate PasswordCredential.passwordName
- Deprecate PasswordCredential.additionalData
- Deprecate fetch.RequestInit.RequestCredentials.password
Links:
- GitHub Issue: https://github.com/w3c/webappsec-credential-management/issues/75
- GitHub Pull Request: https://github.com/w3c/webappsec-credential-management/pull/76
- Web Application Security Discussion Thread: https://lists.w3.org/Archives/Public/public-webappsec/2017Apr/0026.htmlSupport in other browsers:Internet Explorer: No public signals
Firefox: neutral, commented on the PR
Safari: initially concerned but no further feedback despite several pings
IMPORTANT:
- This launch issue is used for standards and implementation tracking only.
It is NOT for Chrome approval regarding privacy, security, legal, UI,
testing,
accessibility etc.
- An overview of the different launch issues can be found here:
http://bit.ly/2ncKZfp
- If your feature requires security / privacy / etc approval then seek a PM
to guide you through the go/newchromefeature process
See http://www.chromium.org/blink#launch-process for an overview of the
Blink launch process, but note this doesn't cover security / privacy / etc
reviews as discussed above.
----------
Change description:
This change exposes passwords to JavaScript in the Credential Management API by providing the corresponding attribute on PasswordCredential. Furthermore it deprecates the previously existing PasswordCredential attributes and the custom `fetch()` `credential` infrastructure.
Changes to API surface:
- Introduce PasswordCredential.password
- Deprecate PasswordCredential.idName
- Deprecate PasswordCredential.passwordName
- Deprecate PasswordCredential.additionalData
- Deprecate fetch.RequestInit.RequestCredentials.password
Links:
- GitHub Issue: https://github.com/w3c/webappsec-credential-management/issues/75
- GitHub Pull Request: https://github.com/w3c/webappsec-credential-management/pull/76
- Web Application Security Discussion Thread: https://lists.w3.org/Archives/Public/public-webappsec/2017Apr/0026.html
Support in other browsers:
Internet Explorer: No public signals
Firefox: neutral, commented on the PR
Safari: initially concerned but no further feedback despite several pings
Comment 1 by jdoerrie@chromium.org
, May 15 2017