Publish minutes of 2025-11-10 - 2025-11-14 TPAC meetings

[Rob--W]

Generated from https://docs.google.com/document/d/1KVyD0f04EeuuEYS81ujRJSeCn4CmPtOR9-FMF2jXtNk/edit using the tool and process from #105.

Last week, the WECG met at TPAC 2025 (#843). This PR contains the minutes of the meetings.

Monday, 10 November 2025

Discussed or mentioned issues: #281, #892, #238, #896, #316, #878, #897, #903.

Agenda of _minutes/2025-11-10-wecg-tpac.md:

• Welcome
• Working Group Charter
• Web Platform Tests Status
• User Attention
• Extension Origin
• Bug Triage

Thursday, 13 November 2025

Discussed or mentioned issues: #235, #898, #684, #274, #899, #917, #832, #128, #515, #517, #521, #588, #616, #833 and PRs #873, #905, #882, #837.

Agenda of _minutes/2025-11-13-wecg-tpac.md:

• Secure Storage
• Click-jacking protections
• User Gestures
• Bug Triage
• Sidebar API
• Next meetup in 2026

Friday, 14 November 2025

Agenda of _minutes/2025-11-14-wecg-tpac.md:

• Sidebar alignment

For readability, the list of issue numbers along with their titles is included below.

List of covered topics, issue numbers + titles

Monday, 10 November 2025

• Inconsistency: runtime.getURL() #281
• Real estates for accessible communication with the user #892
• WebExtensions should use asset links model for WebAuthn RP ID #238
• There is no HTTP Referer header for iframe in an extension page #896
• tabs.getCurrent() returns undefined when being called from the popup #316
• Proposal: runtime.getVersion() method #878
• Add support for tabs.create({ incognito: true }) #897
• Proposal: Get a way to get the associated tab id from an action popup #903

Thursday, 13 November 2025

• Discuss allowing extensions to reliably draw over pages #235
• Add a way to synthesize user gesture on a page as extension #898
• Feature request: grant user gestures (activeTab?) for omnibox events #684
• Proposal: i18n.withLanguage #274
• Proposal: SecurityInfo in WebRequest #899
• Proposal: Add management.readOnly permission for read-only access to management API #917
• Spec clarification: TabId 0 #832
• Proposal: agree on a unified sidebar API for mv3 #128
• sidePanel API: support "one instance per tab" in openPanelOnActionClick #515
• sidePanel API: lifecycle events #517
• sidePanel API: sidePanel.close() and sidePanel.toggle() #521
• Tab-specific sidePanel inconsistencies when opening new tabs/switching tabs #588
• Content script injection inconsistencies in the sidePanel #616
• Side Panel API: query position: left/right, close(), and focus(): tab to and from side panel #833
• Add specification for externally_connectable. #873
• Specify execution context #905
• Proposal: WebRequest.securityInfo API for receiving TLS certificate from web requests. #882
• Proposal: close() Method for the sidePanel API #837

Friday, 14 November 2025

• Proposal: agree on a unified sidebar API for mv3 #128

[Rob--W]

List of action items and resolutions from the meeting notes; the list items are literally copied from the notes, see the docs for further context:

• Action Item: Simeon to copy the language from the CG charter and get feedback from there. We can break this out into a separate document if/when necessary.
• Action Item: Simeon to resolve comment threads, in addition to adding blurb from CG about non-spec'd APIs
  • This refers to comment threads on PR Apply revisions requested in w3c/strategy#146 charter-drafts#711
• Action Item: Devlin to close issue 892
• Action Item: Rob to create proposal for extension origin
• Resolution: Chrome neutral on tabs.create({ incognito: true }) (Firefox and Safari were already supportive)
• Action Item: Update secure-storage.md based on feedback.
• Resolution: Close Issue 684. It is implemented in all browsers that support the API.
• Action Item: Oliver to file follow-ups for user gesture related topics. User activation has support from everyone, currying and consumption needs more discussion.
  • Done:
    • Grant time-based user activation from extension events that grant a user gesture #918
    • Should user gestures be curried between contexts? #919
    • Should extension APIs consume user activation? #920
• Resolution: Consensus on Proposal A for getLanguageDictionary.
• Action Item: Rob to specify “privileged extension context”
  • Done: Specify execution context #905
• Action item: Rob and Oliver to verify feasibility of aliasing sidebar to sidepanel.
  • Done: met the next day, captured in 2025-11-14-wecg-tpac.md

[oliverdunk]

Thanks Rob!

[xeenon]

Just one thing to fix from my statements about externally_connectable.

spam