[Bug 25987] Blob URL parsing / fetching model

https://www.w3.org/Bugs/Public/show_bug.cgi?id=25987

--- Comment #1 from Arun <arun@mozilla.com> ---
(In reply to Anne from comment #0)
> Given
> http://lists.w3.org/Archives/Public/public-webapps/2014AprJun/0683.html we
> might need to revisit our strategy.
> 
> It seems we've already given the URL parser access to the global environment
> so it can reach the blob URL store.
> 
> However, the scope of the blob URL store also encompasses global
> environments that can be reached solely through document.domain and so not
> all of them are same-origin. So I guess in addition a same-origin check is
> in order. I guess we should do the same-origin check in the URL parser so
> it's deterministic.
> 
> And then fetching a URL which has an associated object will just never fail.
> 
> Does that make sense?


It makes sense, but I'm not clear what pieces of the origin check occur in the
URL Parser vs. what occur in File API.

Units of same origin browsing contexts maintain a Blob URL Store. Where should
the origin check happen?

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Thursday, 5 June 2014 15:02:22 UTC