Closed Bug 1579281 Opened 5 years ago Closed 5 years ago

[meta] WebXR needs to ask permission before accessing XR hardware devices

Categories

(Core :: WebVR, enhancement, P2)

Product:
Core
Component:
WebVR
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: kip, Assigned: kip)

References

(Blocks 1 open bug)

Details

(Keywords: meta)

Attachments

(8 files, 4 obsolete files)

Allowed.png
(deleted), image/png
Details
Allowed_popup.png
(deleted), image/png
Details
Blocked.png
(deleted), image/png
Details
Blocked_popup.png
(deleted), image/png
Details
Page_Info.png
(deleted), image/png
Details
Permissions.png
(deleted), image/png
Details
Prompt.png
(deleted), image/png
Details
Security_And_Privacy.png
(deleted), image/png
Details

The WebXR spec requires both a user gesture and signal of user intent before providing access to XR (eg, VR and AR headset) displays and sensors.

I propose that such a "signal of user intent" be presented with the same UX as the geolocation API requests. As per the geolocation requests, an indicator will be displayed in the URL bar to inform the user when WebXR sessions are active or have been blocked. When the WebXR API is not in use by the page, no additional indication will occupy the URL bar.

An option to control the sites that have been granted WebXR permissions would be provided on the preference dialogues together with others such as geolocation and webrtc camera access.

When the user is in private browsing mode, the "remember this decision" option will not be enabled, according to the existing behavior for the geolocation prompt.

When the resistfingerprinting pref is enabled, WebXR will be disabled and the prompt will not appear.

Depends on: 1579243
Depends on: 1579267
Depends on: 1579276

NI'ing myself as a reminder to put the text for the dialog into a doc for @jvo's review.

Flags: needinfo?(kgilbert)
Attached image Proposed UX for accessing XR device permission dialogue (obsolete) (deleted) —
Blocks: 1572461

Doc with strings sent, clearing self-reminder NI...

Flags: needinfo?(kgilbert)
Attached image Proposed UX for XR device permission request (obsolete) (deleted) —
Keywords: meta
Depends on: 1580567
Summary: Implement WebXR permission prompt → WebXR needs to ask permission before accessing XR hardware devices
Summary: WebXR needs to ask permission before accessing XR hardware devices → [meta] WebXR needs to ask permission before accessing XR hardware devices
Depends on: 1582344
Attached image Proposed UX for page info dialogue permissions tab (obsolete) (deleted) —

As Firefox desktop is currently only going to be used with Virtual Reality devices (FxR Mobile would be used for AR), I have simplified the text in the dialogues. The text now consistently says "virtual reality devices". FxR Android variants would re-implement this UI with appropriate text for each platform.

Attached image Allowed.png (deleted) —
Attachment #9091518 - Attachment is obsolete: true
Attachment #9091519 - Attachment is obsolete: true
Attachment #9092152 - Attachment is obsolete: true
Attachment #9094080 - Attachment is obsolete: true
Attached image Allowed_popup.png (deleted) —
Attached image Blocked.png (deleted) —
Attached image Blocked_popup.png (deleted) —
Attached image Page_Info.png (deleted) —
Attached image Permissions.png (deleted) —
Attached image Prompt.png (deleted) —
Attached image Security_And_Privacy.png (deleted) —

Updated screenshots to show simplified text. Now referring to "Virtual Reality" rather than XR, as only Virtual Reality devices will be used by Firefox desktop currently. (Augmented reality devices are all currently standalone hardware, and not tethered to a PC).

No longer depends on: 1579243
Depends on: 1603631
Depends on: 1603825
No longer depends on: 1582344
No longer depends on: 1603631

All dependencies are done, closing meta bug.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: