[w3c/ServiceWorker] should local URLs check origin before inheritting a controller? (#1262)

Currently the spec says:

> When the request’s url is local, if the service worker client's responsible browsing context is a nested browsing context or the service worker client is a worker client, the service worker client inherits the service worker registration from its parent browsing context’s environment or from the environment of a Document in the service worker client's global object's owner set, respectively, if it exists.

However, data: URL workers receive an opaque origin.  Presumably these workers should not inherit the parent's service worker since its from a different origin, correct?  Its similar to sandboxing.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/1262

Received on Thursday, 18 January 2018 21:32:35 UTC