Intent to Prototype: Page-Embedded Permission Control

[Andy Paicu]

Contact emails

andy...@google.com, pjmcl...@google.com, eng...@google.com

Explainer

https://github.com/andypaicu/PEPC/blob/main/explainer.md

Specification

None

Summary

Provide a new HTML element that interacts with the permission flow. The permission prompt is currently triggered directly from JS without the user agent having any strong signal of the user's intent. Having an in-content element that the user uses to trigger the permission flow allows for improved permission prompt UX for users as well as a recovery path from the "denied" permission state for sites. Explainer: https://github.com/andypaicu/PEPC/blob/main/explainer.md

Blink component

UI>Browser>Permissions>Prompts

Motivation

To be able to meaningfully improve upon the status quo, user agents need to be able to extract more trustworthy signals from the content area about the user's task and intent, so they can be more opinionated and confident in their communication to users regarding capability access. This is especially important if user agents want to safely enable users to change their minds without abdicating their responsibility for representing users' earlier permanent block decisions.

Initial public proposal

https://github.com/WICG/proposals/issues/113

TAG review

None

TAG review status

Pending

Risks

Interoperability and Compatibility

Writing sites that function well for both user agents that support this feature and those that don't will require more work. A polyfill library would help cover this interoperability issue by providing a custom element that will trigger the old permission flow if the user agent does not support the new one.

Gecko: No signal

WebKit: No signal

Web developers: No signals

Other signals:

WebView application risks

Does this intent deprecate or change behavior of existing APIs, such that it has potentially high risk for Android WebView-based applications?

None

Debuggability

None

Is this feature fully tested by web-platform-tests?

No

Flag name on chrome://flags

None

Finch feature name

None

Non-finch justification

None

Requires code in //chrome?

True

Estimated milestones

No milestones specified

Link to entry on the Chrome Platform Status

https://chromestatus.com/feature/5125006551416832

This intent message was generated by Chrome Platform Status.