Re: [ServiceWorker] register() should not allow file://, wss://, etc (#780)

These scheme checks should also be performed on the script URL.  For example, a blob: URL may return an origin that matches the page, but we don't want to allow blob URLs as SW scripts.

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/780#issuecomment-155450400