Disable web platform features and web APIs

[muodov]

Disable web platform features and APIs

Submitter(s)

Maxim Tsoy, DuckDuckGo

Motivation

Depending on the use-case, (native) app developers may want to disable certain APIs available to the web content.
For example, DuckDuckGo apps would like to disable some APIs, such as Battery API, considered dangerous for users' privacy.

Stakeholders

WebView vendors, app developers

Analysis

Currently the only way to block certain APIs is via JS injections, which have certain limitations (see #20)

Related W3C deliverables and/or work items

Permissions Policy

How is the issue solved in the Browser, and what’s more is needed?

For some experimental APIs, browsers often have configuration flags. Some APIs can be disabled through Permissions Policy (aka Feature Policy), but the list of controlled features is limited and different per browser.

[QingAn]

Collect more details and update the description @muodov