New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 779584 link

Starred by 2 users

Issue metadata

Status: Started
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Android , Windows , Chrome , Mac
Pri: 1
Type: Feature



Sign in to add a comment

Allow localhost manifests via a developer tool switch.

Project Member Reported by rouslan@chromium.org, Oct 30 2017

Issue description

Allow localhost manifests via a developer tool switch as discussed on https://github.com/w3c/payment-method-manifest/pull/19.

For testing and development, allow the (1) payment method identifier, (2) default application URL, and (2) supported origin to be localhost. For example:

http://localhost:8080/some-path
http://127.0.0.1:8080/some-path
http://[::1]/some-path
 
Components: Platform>DevTools
Cc: zkoch@chromium.org
DevTools team: Where would be the best place in DevTools for a "Allow localhost payment manifests" toggle?
Cc: paulkinlan@chromium.org dgozman@chromium.org
CC-ing devtools folks.
Spoke with DevTools team in person. Because this feature is going to be used by a small fraction of developers, the team suggested a command-line flag. Because this flag would be disabling a security feature, Chrome should display a butter bar with a security warning. Dismissing the bar should restore the security to the safe level. 
> Dismissing the bar should restore the security to the safe level.

Existing security features in https://cs.chromium.org/chromium/src/chrome/browser/ui/startup/bad_flags_prompt.cc don't do this, so we're not going to either.
Status: Started (was: Assigned)
Components: -Platform>DevTools

Sign in to add a comment