{"id":38815,"date":"2023-02-07T00:32:57","date_gmt":"2023-02-07T00:32:57","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/02\/07\/chrome-110-changes-how-web-share-api-embeds-third-party-content\/"},"modified":"2023-02-07T00:34:04","modified_gmt":"2023-02-07T00:34:04","slug":"chrome-110-changes-how-web-share-api-embeds-third-party-content","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/02\/07\/chrome-110-changes-how-web-share-api-embeds-third-party-content\/","title":{"rendered":"Chrome 110 Changes How Web Share API Embeds Third Party Content"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Chrome 110, scheduled to roll out on February 7, 2022, accommodates a change to the way it handles the Net Share API that improves privateness and safety by requiring a the Net Share API to explicitly enable third-party content material.<\/p>\n

This may not be one thing that a person writer must act on.<\/p>\n

It\u2019s most likely extra related on the developer aspect the place they’re making issues like internet apps that use the Net Share API.<\/p>\n

Nonetheless, it\u2019s good to know what it’s for the uncommon state of affairs when it may be helpful for diagnosing why a webpage doesn\u2019t work.<\/p>\n

The Mozilla developer web page describes the Web Share API<\/a>:<\/strong><\/p>\n

\n

\u201cThe Net Share API permits a web site to share textual content, hyperlinks, recordsdata, and different content material to user-selected share targets, using the sharing mechanisms of the underlying working system.<\/p>\n

These share targets sometimes embody the system clipboard, electronic mail, contacts or messaging purposes, and Bluetooth or Wi-Fi channels.<\/p>\n

\u2026Word: This API shouldn’t be confused with the Net Share Goal API, which permits an internet site to specify itself as a share goal\u201d<\/p>\n<\/blockquote>\n

enable=\u201dweb-share\u201d Attribute<\/h2>\n

An attribute is an HTML markup that modifies an HTML aspect not directly.<\/p>\n

For instance, the nofollow attribute modifies the <a> anchor aspect, by signaling the major search engines that the hyperlink isn’t trusted.<\/p>\n

The <iframe> is an HTML aspect and it may be modified with the enable=\u201dweb-share\u201d attribute<\/p>\n

An <iframe> permits a webpage to embed HTML, often from one other web site.<\/p>\n

Iframes are in all places, equivalent to in ads and embedded movies.<\/p>\n

The issue with an iframe that accommodates content material from one other web site is that it creates the potential for exhibiting undesirable content material or enable malicious actions.<\/p>\n

And that\u2019s the issue that the enable=\u201dweb-share\u201d attribute solves by setting a permission coverage for the iframe.<\/p>\n

This particular permission coverage (enable=\u201dweb-share\u201d) tells the browser that it\u2019s okay to show third get together content material from inside an iframe.<\/p>\n

Google\u2019s announcement makes use of this instance of the attribute in use:<\/p>\n

\n
<iframe enable=\"web-share\" src=\"https:\/\/third-party.instance.com\/iframe.html\"><\/iframe><\/pre>\n<\/blockquote>\n
Google calls this a \u201ca doubtlessly breaking change within the Net Share API.<\/em>\u201d<\/p>\n
The announcement warns:<\/strong><\/p>\n
\n
\u201cIf a sharing motion must occur in a third-party iframe, a latest spec change requires you to explicitly enable the operation.<\/p>\n
Do that by including an enable attribute to the <iframe> tag with a worth of web-share.<\/p>\n
This tells the browser that the embedding web site permits the embedded third-party iframe to set off the share motion.\u201d<\/p>\n<\/blockquote>\n
Learn the announcement at Google\u2019s Chrome webpage:<\/strong><\/p>\n
New requirements for the Web Share API in third-party iframes<\/a><\/p>\n
Featured picture by Shutterstock\/Krakenimages.com<\/em><\/p>\n<\/div>\n