Skip to content

Security section needs to be enhanced #73

Open

Description

@cabanier

From reading the explainer, it's unclear what would happen if the model is larger than the space that the model tag is specifying. Is the assumption that it will be cut down or can it overflow its box?

For use cases where the model is actually 3D, how far would it be allowed to extend from the page? Would it consume or pass through mouse/touch events?

Would there be mitigations if the models are too large in size or complexity or if there are too many?

Activity

  1. changed the title [-]Security section needs to be enhanced.[/-] [+]Security section needs to be enhanced[/+] on Sep 8, 2021
  2. grorg commented on Sep 9, 2021

    @grorg
    Contributor

    These are all good questions, but I'm not sure they are all related to security. I've been planning to add a section on displaying the model - how to scale it into the viewport, etc.

  3. cabanier commented on Sep 9, 2021

    @cabanier
    Author

    If a model is allowed to overflow the element's viewport, it could interfere with the browser's chrome or make parts of the page hard to access. It needs to be limited to the area of the element and a reasonable depth.
    As for events, is the intent that the user can manipulate the model (ie grab and rotate). If so, should that create events?

    I've been planning to add a section on displaying the model - how to scale it into the viewport, etc.

    That would be great!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions