Great thread in the defense of WebView-based in-app browsers from @patmeenan, who’s been working on Facebook’s. â¤µï¸ Hear him out with an open mind! https://t.co/TWFctZlBku
@simevidas @slightlylate For those following along, I have opened an interoperability issue for this difference in behavior: https://t.co/JVwLifN7pm. 🔋 The initial tweet and the material is credited to you, Šime.
@andreban Or make the request from outside the WebView, strip the response header, and then inject the modified response. 🤔 Or maybe `shouldInterceptRequest()` allows to modify the response headers directly?
@lajava77 @regocas @googlechrome Fascinating read, thanks for writing this up. I touched the topic in the context of https://t.co/qz3iDxTJJ1, but little did I know about the internals. Also: yay for IPFS support. Brave already supports it if I recall corr
@KrauseFx FWIW, when I looked, they didn’t seem able to do anything completely unexpected with the injected script data that I saw.
@simevidas @slightlylate Ah, the spec mentions remote clipboard synchronization as a use case that needs to work without user gesture: https://t.co/iBiIcB54n6.
@Paul_Kinlan The devil 💿 is always in the details: “If the idea is for this file to be copyable to a directory on the user’s machine, we would need some mechanism for running Safe Browsing checks before copying a file from the sandboxed file system t
@Paul_Kinlan Not yet. See https://t.co/hb9rgU7EfL and https://t.co/1VoHtfYznE. It’s definitely something I wish for.
@simevidas @slightlylate The clipboard-write permission was removed in https://t.co/tMnbS7kYqu, but I’m a little surprised, too, that no user gesture is required: https://t.co/8jJjysxjAP. The article should probably say what Alex’ tweet says regarding
@mrdoob @alexanderdanilo @grorgwork 💀 Do you have history links for both CSS3D and `<canvas>`? You got me intrigued now.
Oh, neat: `<dark-mode-toggle>` (https://t.co/FKfxCMMVoL) 🌒 is the featured item in the “🔧 Code, Tools & Resources†section on Frontend Focus this week: https://t.co/xv2ZS2SQIF.
Due to recent chatter (see quoted tweet ⤵ï¸), if you need to inspect a WebView like Facebook’s, I’ve documented how to do this some time ago: https://t.co/WefCDFgM7H. https://t.co/16qUi2sZaQ
💀 Interesting proposal by â¦@adrianholovatyâ© for WebViews to honor the desire of websites not to be framed by respecting the `X-Frame-Options: DENY` header value (equivalent to `Content-Security-Policy: frame-ancestors ‘none’;`) https://t.co/m7fxVkC
RT @claviska: ElementInternals was just merged into WebKit! https://t.co/QEwQlPqtbB
RT @dannymoerkerke: Push notifications now work in Safari Tech Preview on MacOS Ventura!
Notifications are even shown when Safari is not…