- From: Anne van Kesteren <annevk@annevk.nl>
- Date: Thu, 20 Nov 2014 10:55:15 +0100
- To: Brad Hill <hillbrad@fb.com>
- Cc: Boris Zbarsky <bzbarsky@mit.edu>, WebAppSec WG <public-webappsec@w3.org>
On Wed, Nov 19, 2014 at 11:59 PM, Brad Hill <hillbrad@fb.com> wrote: > document.origin is always undefined in both FF and Chrome. It's relatively new, and indeed not implemented yet :/ https://bugzilla.mozilla.org/show_bug.cgi?id=931884 > Also, event.origin > (https://developer.mozilla.org/en-US/docs/Web/API/Window.postMessage#The_di > spatched_event) > is always an empty string for messages from Workers. I guess it's > unnecessary on the assumption that channels to Workers are always > same-origin, > but seems like that might hurt if any kind of non-same-origin Workers are > defined? Filed https://www.w3.org/Bugs/Public/show_bug.cgi?id=27377 -- https://annevankesteren.nl/
Received on Thursday, 20 November 2014 09:55:47 UTC