An iframe from googlesyndication.com tries to access the camera and microphone

Re:An iframe from googlesyndication.com tries to access the ... by d0gbread on Sunday December 19, 2021 @02:09PM (#29617190)

I thought they meant more like sandbox environment. Why would the API to access those things exist at all?

[ Parent | on HN ]

Re:An iframe from googlesyndication.com tries to access the ... by jimbojet on Sunday December 19, 2021 @02:17PM (#29617285)

The API exists because zoom.com request microphone and camera through an iframe is a legit use case. As OP said below CSPs exist so that enterprises can lock down those vulnerabilities. But wouldn’t make sense to lock it down for all consumers.

[ Parent | on HN ]

Re:An iframe from googlesyndication.com tries to access the ... by tehlike on Sunday December 19, 2021 @02:11PM (#29617221)

Sandbox is provided through things like ContentSecurityPolicy and Feature Policies. See my comment on this.

[ Parent | on HN ]