Skip to content

Add note about blocking access to builtin HID devices #170

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
gregstoll wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Add note about blocking access to builtin HID devices #170

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
26d2943
Add note about blocking access to builtin HID devices
gregstoll Oct 29, 2026
3ec9bd1
remove part about usefulness
gregstoll Oct 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions index.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -196,6 +196,13 @@ require two separate interactions: one interaction to select the
device from the list and a second interaction to confirm the
selection and dismiss the dialog.

Additionally, allowing pages to access HID devices that are built in to a
host is higher risk as these HID devices generally cannot be disconnected,
and these devices are more likely to be exploited at scale since attackers
can be more confident that a particular host has the vulnerable device. As
such, a user agent may exclude these devices from the chooser, or require
additional steps to make them visible.

# Extensions to the `Navigator` interface # {#extensions-to-the-navigator-interface}

<xmp class="idl">
Expand Down