@mocanvas/mocanvas · constant

EMBED_SHAPE_PERMISSION_NAMES

declare const EMBED_SHAPE_PERMISSION_NAMES: readonly ["accelerometer", "autoplay", "camera", "clipboard-write", "encrypted-media", "fullscreen", "geolocation", "gyroscope", "microphone", "picture-in-picture"]

The powerful features an embedded page may be granted, as the iframe allow attribute names them.

Deliberately a *permit* vocabulary and not a copy of the browser's whole feature-policy list: everything absent from here can never be granted by a definition, which is what keeps "add an embed provider" from turning into "hand a third-party page the microphone by accident".

mocanvas is built by Symbio. Free for non-commercial, non-profit and development use; commercial use needs an agreement. Not affiliated with or endorsed by tldraw.