-
Notifications
You must be signed in to change notification settings - Fork 27
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Security section needs to be enhanced #73
Comments
These are all good questions, but I'm not sure they are all related to security. I've been planning to add a section on displaying the model - how to scale it into the viewport, etc. |
If a model is allowed to overflow the element's viewport, it could interfere with the browser's chrome or make parts of the page hard to access. It needs to be limited to the area of the element and a reasonable depth.
That would be great! |
From reading the explainer, it's unclear what would happen if the model is larger than the space that the model tag is specifying. Is the assumption that it will be cut down or can it overflow its box?
For use cases where the model is actually 3D, how far would it be allowed to extend from the page? Would it consume or pass through mouse/touch events?
Would there be mitigations if the models are too large in size or complexity or if there are too many?
The text was updated successfully, but these errors were encountered: