w3c/web-share

Suggesting preview for security should mention accessibility

Closed this issue · 1 comments

The security considerations for the share method include the following suggestion:

Content that is previewed and authorized by a user might be safe to forward, however it is not always possible for a person to identify when information should be confidential, so forwarding any content presents a risk. In particular, the title might be used by an attacker to trick a user into misinterpreting the nature of the content.

As well as pointing out that title can be used to mislead, it would make sense to point to the accessibility considerations, and/or note that if such preview methods are not designed for high quality accessibility the proposed mitigation of security will fail.

Expanded on the accessibility of the share sheet. #270 ... @chaals, can you take a look and let me know if what I added addresses the issue?

Unfortunately, the share sheet is often outside the scope of the browser (i.e., OS provided widget), so the user agent might have any influence or control over the presentation and accessibility aspects of the share sheet. Irrespective, it's helpful to list these guidelines as hopefully OS engineers + OS UX/UI designers will also hopefully read them...