> For an iframe created from a cross-origin blob URL I would expect it to get the cross-origin. It seems like it cannot inherit the controller from the parent, though, because then the SW controller's origin would not match the controlled client's origin. It seems to me it should either get the controller from the context that called createObjectURL() or no controller. Ah good point. Cross origin blob URL iframes I hadn't considered. That indeed blows a big hole in my argument, since there the opposite reasoning would apply... -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/w3c/ServiceWorker/issues/1261#issuecomment-358795851
Received on Thursday, 18 January 2018 22:00:57 UTC