Re: [w3c/ServiceWorker] should blob URLs inherit controller from parent environment or environment that called `createObjectURL()`? (#1261)

> Worker scripts cannot be cross-origin with or without CORS, currently. 

According to the spec module workers can be loaded from a cross origin URL (it's only "Fetch a classic worker scirpt" that sets mode to same-origin), unless I'm missing something? Sure, I don't think browsers have implemented that yet, but it is in the spec.

> I thought the blob URL always got its origin from the its creating context for some reason.

Blob URLs do get their origin from their creating context, yes.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/1261#issuecomment-358795608

Received on Thursday, 18 January 2018 22:00:05 UTC