Appendix C - Web features used by the Web-client

Feature

Involved component

Mandatory/
optional

End-user
manageable

CORS

Client

Mandatory

No

postMessage (XDM)

Helper and Client

Mandatory

No

Cookies (clientID)

csfe-js

Optional

Browser setting

Cookies (merchant)

Client and merchant

Optional

Browser setting

CSP

csfe-js

Optional

No

cryptoAPI

Client

Optional

No

WebView

Client

Optional

No

Touch-screen

Client

Optional

No

CSS3

Client

Optional

No

SVG

Client

Mandatory

No

JSON

Helper and Client

Mandatory

No

object.keys

Helper and Client

Mandatory

No

queryselector

Client

Mandatory

No

element.OuterHTML

Helper and Client

Mandatory

No

Secure form elements

Client

Optional

No

ShadowDOM

Client

Optional

No

Mutation observer

Client

Optional

No


Table 18 – Web features used by the BankID Web-client