Skip to content

Commit 2b9dec0

Browse files
authored
Merge pull request #31 from mgiuca/no-separate-failure
Removed note about distinguishing between different error cases. Closes #29.
2 parents 5bc5049 + 4e5e84f commit 2b9dec0

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

index.html

+6-7
Original file line numberDiff line numberDiff line change
@@ -161,13 +161,6 @@ <h4>
161161
perform any kind of "always use this target" to bypass the UI in
162162
subsequent share operations.
163163
</div>
164-
<div class="note">
165-
The user agent MAY differentiate between the three different causes
166-
of <a data-cite="!WEBIDL#aborterror"><code>AbortError</code></a>
167-
failure (e.g., with a different error string in each case).
168-
However, it MUST NOT expose the identity of the target chosen by
169-
the user, or reveal the identity of any of the available targets.
170-
</div>
171164
</section>
172165
</section>
173166
<section data-dfn-for="ShareData">
@@ -307,6 +300,12 @@ <h2>
307300
<a><code>navigator.share</code></a>. This information could be used for
308301
fingerprinting, as well as leaking details about the user's device.
309302
</li>
303+
<li>Implementors should carefully consider what information is revealed
304+
in the error message when <a><code>navigator.share</code></a> is
305+
rejected. Even distinguishing between the case where no targets are
306+
available and user cancellation may reveal information about which apps
307+
are installed on the user's device.
308+
</li>
310309
<li>On every call to <a><code>navigator.share</code></a>, the user MUST
311310
be presented with a dialog asking them to select a target application
312311
(even if there is only one possible target). This surface serves as a

0 commit comments

Comments
 (0)