Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security section needs to be enhanced #73

Open
cabanier opened this issue Sep 8, 2021 · 2 comments
Open

Security section needs to be enhanced #73

cabanier opened this issue Sep 8, 2021 · 2 comments
Assignees
Labels

Comments

@cabanier
Copy link

cabanier commented Sep 8, 2021

From reading the explainer, it's unclear what would happen if the model is larger than the space that the model tag is specifying. Is the assumption that it will be cut down or can it overflow its box?

For use cases where the model is actually 3D, how far would it be allowed to extend from the page? Would it consume or pass through mouse/touch events?

Would there be mitigations if the models are too large in size or complexity or if there are too many?

@cabanier cabanier added the model label Sep 8, 2021
@cabanier cabanier changed the title Security section needs to be enhanced. Security section needs to be enhanced Sep 8, 2021
@grorg
Copy link
Contributor

grorg commented Sep 9, 2021

These are all good questions, but I'm not sure they are all related to security. I've been planning to add a section on displaying the model - how to scale it into the viewport, etc.

@cabanier
Copy link
Author

cabanier commented Sep 9, 2021

If a model is allowed to overflow the element's viewport, it could interfere with the browser's chrome or make parts of the page hard to access. It needs to be limited to the area of the element and a reasonable depth.
As for events, is the intent that the user can manipulate the model (ie grab and rotate). If so, should that create events?

I've been planning to add a section on displaying the model - how to scale it into the viewport, etc.

That would be great!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants