Re: [css-houdini-drafts] [worklets] Restrict worklets to same-origin

I've looked at the spec some more.  The worklet global is currently spec'd to be an opaque origin.  So this issue probably doesn't make too much sense.

Also, the spec is written such that the worklet does not fetch its own module scripts.  This is done by the owning document. 

So its ok to treat the worklet global as a proper client.  It just has an opaque origin and no one can see it via the Clients API.  It also isn't controlled by a service worker, but thats ok too since it doesn't do any fetching itself.

I think this can probably be closed.  (At least from my perspective.)

Sorry for the confusion.

-- 
GitHub Notification of comment by wanderview
Please view or discuss this issue at https://github.com/w3c/css-houdini-drafts/issues/473#issuecomment-335874276 using your GitHub account

Received on Wednesday, 11 October 2017 16:50:06 UTC