- From: Tab Atkins Jr. via GitHub <sysbot+gh@w3.org>
- Date: Sun, 12 Aug 2018 17:31:05 +0000
- To: public-css-archive@w3.org
Browsers already block Referer when the starting page is a local file, so that blocks 2, and browsers already have some ~magic~ for assigning local files an origin (I think each file is just in a unique origin?) so that blocks 1. 3 is still available, but only if you open the local file and then click links in it, which yeah, is already observable by a hostile local file. -- GitHub Notification of comment by tabatkins Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/3012#issuecomment-412358635 using your GitHub account
Received on Sunday, 12 August 2018 17:31:07 UTC