{"version":"2.1.265","anchor":"new-network-off-read-consent-path-attestedreadconsented-can","canonical_anchor":"new-network-off-read-consent-path-attestedreadconsented-can","heading":"New network-off read consent path: attestedReadConsented can bypass the ask-permission prompt","tier":"soon","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.265\/e\/new-network-off-read-consent-path-attestedreadconsented-can","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.265","markdown":"### New network-off read consent path: attestedReadConsented can bypass the ask-permission prompt\n\nA new consent check can let network-off reads of artifacts or URLs skip the permission prompt\n\n**Unclear.** The finding doesn't say what establishes attestedReadConsented or in what situations it becomes true.\n\n**What**\n\nWhen network access is turned off, reading an artifact or URL normally still requires an 'ask' permission prompt unless it's your own artifact. Now there's an additional check, `attestedReadConsented`, that can also satisfy this requirement: if it returns true, the read is allowed to proceed without the usual prompt, even without ownership.\n\n**Why**\n\nThis adds another path for skipping the read-permission prompt when network access is disabled, reducing unnecessary interruptions in cases where consent has already been established.\n\n- Area: Permissions\n- Names: `attestedReadConsented`\n- Tier: Nothing to try yet\n- Useful: 3\/5\n- Signal: 3\/5\n- Present in the build but not switched on"}