I think the current spec is right, and parent environment makes the most sense. I was going to say that with module workers, whose scripts can be cross-origin we'd have no choice since it really wouldn't make sense for the worker to be controlled by a cross-origin service worker, but then I realized that if I'm not mistaken a you'd still need CORS to be able to fetch a cross origin module worker, which won't work with blob URLs, so blob URL workers are still limited to same origin. But I think that might still be an argument that it should to be the parent environment, since presumably we'd want to do the same for https cross origin module workers. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/w3c/ServiceWorker/issues/1261#issuecomment-358792200
Received on Thursday, 18 January 2018 21:47:17 UTC