> They believe that the feature would be best controlled via multiple new sandbox flags.
I don't think anyone from Mozilla has said that. What I have said is that the current way to control how iframes work is getting very complicated and the new attribute adds yet another mechanism. And if most of the users will use both sandbox and credentialless, understanding how those work together can be rather confusing. Also, credentialless isn't exposing the primitives itself, but some unique set of features. I'd rather see primitives to be exposed and other features built on top of them. -Olli On Thursday, November 10, 2022 at 10:33:43 AM UTC+2 Arthur Sonzogni wrote: > Hi blink-dev, > > > We decided to address issue #5 > <https://github.com/WICG/anonymous-iframe/issues/5>: “rename anonymous > iframe into iframe credentialless”. We will rename <iframe anonymous> to > <iframe > credentialless>. > > For this adjustment to take place, the new plan is to ship in M110 instead > of M109. We do not think the origin trial will need to be extended, since > partners have been or will be able to test up to M108. Therefore, there > will be a gap between the original trial and launch version. > > However, renaming from anonymous to credentialless will not answer > Mozilla's core argument. They believe that the feature would be best > controlled via multiple new sandbox flags. We think it is much less > ergonomic and makes the feature harder to explain to developers. The > integration with sandbox flags has challenging open questions around edge > cases, as listed in this document > <https://github.com/WICG/anonymous-iframe/blob/main/mozilla-sandbox-proposal.md> > . > > > Considering this, we think the current solution is a better one. We have > feedback from partners that it solves their needs. Considering that we have > no clear feedback Mozilla would be interested in implementing anonymous > iframes even if they were spelled as sandbox flags, we believe we should > ship with what we have implemented. > > > -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/0636fd6f-b37a-451c-a628-df5544b1de3cn%40chromium.org.
