Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions index.bs
Original file line number Diff line number Diff line change
Expand Up @@ -204,7 +204,7 @@ which can then be safely exposed to the origin. [[WEBAUTHN]]

Personal information, PII, or their derivatives
should not be exposed to origins
without [meaningful user consent](https://w3ctag.github.io/design-principles/#consent).
without [[DESIGN-PRINCIPLES#user-intent|meaningful user consent]].
Many APIs
use the Permissions API to acquire meaningful user consent.
[[PERMISSIONS]]
Expand Down Expand Up @@ -234,7 +234,7 @@ without a separate permissions prompt.
See also

* [[#user-mediation]]
* [[DESIGN-PRINCIPLES#consent]]
* [[DESIGN-PRINCIPLES#user-intent]]

<h3 class=question id="sensitive-data">
How do the features in your specification deal with sensitive information?
Expand Down Expand Up @@ -467,7 +467,7 @@ If features in your spec expose such data
and does not define adequate mitigations,
you should ensure that such information
is not revealed to origins
without [[DESIGN-PRINCIPLES#consent|meaningful user consent]],
without [[DESIGN-PRINCIPLES#user-intent|meaningful user consent]],
and
you should clearly describe this
in your specification's Security and Privacy Considerations sections.
Expand Down