I have a query  , if i have a application where i want to download the pdf 
automatically without user gesture inside i-frame ,  does it still prevent 
download in this case also ??

On Saturday, January 19, 2019 at 2:37:40 AM UTC+5:30 [email protected] 
wrote:

> *Contact emails*
> [email protected]
>
> *Design doc/Spec*
> Design doc: 
> https://docs.google.com/document/d/1XfLQd9IbJBPAE4IAOvu4EubUaLuICJrDlrmz0Ya_mqQ
> Spec discussion: https://github.com/whatwg/html/issues/3236
> Spec review: https://github.com/whatwg/html/pull/4293
>
> *Summary*
> Prevent downloads in sandboxed iframes without user activation
>
> *Motivation*
> Content providers should be able to restrict whether drive-by-downloads 
> can be initiated for content in iframes, to prevent malicious or abusive 
> downloads. Thus, we plan to prevent downloads in sandboxed iframes that 
> lack a user gesture, and this restriction could be lifted via an 
> 'allow-downloads-without-user-activation' keyword, if present in the 
> sandbox attribute list.
>
> *Risks*
> *Compatibility*
> According to HTML & JavaScript usage 
> <https://www.chromestatus.com/metrics/feature/popularity>, for downloads 
> in sandbox without user gesture 
> (NavigationDownloadInSandboxWithoutUserGesture + 
> HTMLAnchorElementDownloadInSandboxWithoutUserGesture) account for about 
> 0.002% page loads so the compatibility risk is small. Besides, the 
> “allow-downloads-without-user-activation” attribute is always an simple 
> solution to any breakage.
>
> *Interoperability*
> No official signals from other browsers. But the web platform test is 
> supposed to alert other browsers.
>
> *Will this feature be supported on all six Blink platforms (Windows, Mac, 
> Linux, Chrome OS, Android, and Android WebView)?*
> Yes
>
> *Is this feature fully tested by web-platform-tests?*
> Web platform test (.tentative) will be added.
>
> *Link to entry on the feature dashboard*
> https://www.chromestatus.com/feature/5706745674465280
>
> *Requesting approval to ship?*
> Yes
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/chromium.org/d/msgid/blink-dev/4710d63a-f059-4584-8204-674655d3886bn%40chromium.org.

Reply via email to