|
1 | 1 | # [Self-Review Questionnaire: Security and Privacy](https://w3ctag.github.io/security-questionnaire/)
|
2 | 2 |
|
3 |
| -01. What information might this feature expose to Web sites or other parties, |
| 3 | +> 01. What information might this feature expose to Web sites or other parties, |
4 | 4 | and for what purposes is that exposure necessary?
|
5 | 5 |
|
6 | 6 | None.
|
7 | 7 |
|
8 |
| -02. Do features in your specification expose the minimum amount of information |
| 8 | +> 02. Do features in your specification expose the minimum amount of information |
9 | 9 | necessary to enable their intended uses?
|
10 | 10 |
|
11 | 11 | Yes.
|
12 | 12 |
|
13 |
| -03. How do the features in your specification deal with personal information, |
| 13 | +> 03. How do the features in your specification deal with personal information, |
14 | 14 | personally-identifiable information (PII), or information derived from
|
15 | 15 | them?
|
16 | 16 |
|
17 | 17 | No PII is used.
|
18 | 18 |
|
19 |
| -04. How do the features in your specification deal with sensitive information? |
| 19 | +> 04. How do the features in your specification deal with sensitive information? |
20 | 20 |
|
21 | 21 | No sensitive information is used.
|
22 | 22 |
|
23 |
| -05. Do the features in your specification introduce new state for an origin |
| 23 | +> 05. Do the features in your specification introduce new state for an origin |
24 | 24 | that persists across browsing sessions?
|
25 | 25 |
|
26 | 26 | No.
|
27 | 27 |
|
28 |
| -06. Do the features in your specification expose information about the |
| 28 | +> 06. Do the features in your specification expose information about the |
29 | 29 | underlying platform to origins?
|
30 | 30 |
|
31 | 31 | No.
|
32 | 32 |
|
33 |
| -07. Does this specification allow an origin to send data to the underlying |
| 33 | +> 07. Does this specification allow an origin to send data to the underlying |
34 | 34 | platform?
|
35 | 35 |
|
36 | 36 | No.
|
37 | 37 |
|
38 |
| -08. Do features in this specification allow an origin access to sensors on a user’s |
| 38 | +> 08. Do features in this specification allow an origin access to sensors on a user’s |
39 | 39 | device
|
40 | 40 |
|
41 | 41 | No.
|
42 | 42 |
|
43 |
| -09. What data do the features in this specification expose to an origin? Please |
| 43 | +> 09. What data do the features in this specification expose to an origin? Please |
44 | 44 | also document what data is identical to data exposed by other features, in the
|
45 | 45 | same or different contexts.
|
46 | 46 |
|
47 | 47 | No data is exposed to any origin.
|
48 | 48 |
|
49 |
| -10. Do feautres in this specification enable new script execution/loading |
| 49 | +> 10. Do feautres in this specification enable new script execution/loading |
50 | 50 | mechanisms?
|
51 | 51 |
|
52 | 52 | No.
|
53 | 53 |
|
54 |
| -11. Do features in this specification allow an origin to access other devices? |
| 54 | +> 11. Do features in this specification allow an origin to access other devices? |
55 | 55 |
|
56 | 56 | No.
|
57 | 57 |
|
58 |
| -12. Do features in this specification allow an origin some measure of control over |
| 58 | +> 12. Do features in this specification allow an origin some measure of control over |
59 | 59 | a user agent's native UI?
|
60 | 60 |
|
61 | 61 | No.
|
62 | 62 |
|
63 |
| -13. What temporary identifiers do the feautures in this specification create or |
| 63 | +> 13. What temporary identifiers do the feautures in this specification create or |
64 | 64 | expose to the web?
|
65 | 65 |
|
66 | 66 | None.
|
67 | 67 |
|
68 |
| -14. How does this specification distinguish between behavior in first-party and |
| 68 | +> 14. How does this specification distinguish between behavior in first-party and |
69 | 69 | third-party contexts?
|
70 | 70 |
|
71 | 71 | It doesn't.
|
72 | 72 |
|
73 |
| -15. How do the features in this specification work in the context of a browser’s |
| 73 | +> 15. How do the features in this specification work in the context of a browser’s |
74 | 74 | Private Browsing or Incognito mode?
|
75 | 75 |
|
76 | 76 | This feature behaves identically in any mode.
|
77 | 77 |
|
78 |
| -16. Does this specification have both "Security Considerations" and "Privacy |
| 78 | +> 16. Does this specification have both "Security Considerations" and "Privacy |
79 | 79 | Considerations" sections?
|
80 | 80 |
|
81 | 81 | No.
|
82 | 82 |
|
83 |
| -17. Do features in your specification enable origins to downgrade default |
| 83 | +> 17. Do features in your specification enable origins to downgrade default |
84 | 84 | security protections?
|
85 | 85 |
|
86 | 86 | No.
|
87 | 87 |
|
88 |
| -18. What should this questionnaire have asked? |
| 88 | +> 18. What should this questionnaire have asked? |
89 | 89 |
|
90 | 90 | 🤷
|
0 commit comments