You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Firefox uses wgpu-core, but not wgpu. #2603 added web-sys as a dependency of wgpu-core. Firefox requires that all dependencies be vetted for security, so we would very much like to avoid taking on new dependencies unless absolutely necessary.
I haven't looked at how web-sys is being used at all, and don't have any background. I'm just filing this as a reminder to look into whether it can be conveniently hoisted up a level at some point.
The text was updated successfully, but these errors were encountered:
You might wonder why cargo vet (the tool Firefox is using to track these audits) doesn't just ignore wasm32 dependencies, since we don't ship Firefox as a web page. It turns out that Firefox already compiles some of its C++ components to Wasm just for the sandboxing properties. It wouldn't be surprising if it did the same with Rust at some point in the future. So we can't use "Firefox never runs wasm32 targets" as a simplifying assumption.
Firefox uses
wgpu-core
, but notwgpu
. #2603 addedweb-sys
as a dependency ofwgpu-core
. Firefox requires that all dependencies be vetted for security, so we would very much like to avoid taking on new dependencies unless absolutely necessary.I haven't looked at how
web-sys
is being used at all, and don't have any background. I'm just filing this as a reminder to look into whether it can be conveniently hoisted up a level at some point.The text was updated successfully, but these errors were encountered: