Re: [whatwg] EventSource and data URLs

• From: Tab Atkins Jr. <jackalmage@gmail.com>
• Date: Mon, 27 Apr 2015 14:20:21 -0700
• To: Anne van Kesteren <annevk@annevk.nl>
• Cc: WHATWG <whatwg@whatwg.org>, Mike West <mkwst@google.com>
• Message-ID: <CAAWBYDDFr0_oYms9ATdvaRX3sL4xZfNMjkvD31xeOWQL-R7N-Q@mail.gmail.com>

On Mon, Apr 27, 2015 at 7:00 AM, Anne van Kesteren <annevk@annevk.nl> wrote:
> Currently Chrome supports data URLs inside EventSource whereas in
> Firefox EventSource is restricted to http/https URLs:
>
>   https://bugzilla.mozilla.org/show_bug.cgi?id=1156137
>
> What's the convergence we want here?

It's rather frustrating when data: urls don't work in various places;
they're an invaluable debugging tool, at minimum.  They should
generally be treated as the same security level as the page, no?

~TJ

Received on Monday, 27 April 2015 21:21:05 UTC