- From: <bugzilla@jessica.w3.org>
- Date: Tue, 12 Jan 2016 15:26:39 +0000
- To: public-script-coord@w3.org
https://www.w3.org/Bugs/Public/show_bug.cgi?id=29369
Bug ID: 29369
Summary: perform a security check needs to be passed a property
name and type
Product: WebAppsWG
Version: unspecified
Hardware: PC
OS: All
Status: NEW
Severity: normal
Priority: P2
Component: WebIDL
Assignee: cam@mcc.id.au
Reporter: annevk@annevk.nl
QA Contact: public-webapps-bugzilla@w3.org
CC: mike@w3.org, public-script-coord@w3.org
Target Milestone: ---
https://heycam.github.io/webidl/#es-security
[[
perform a security check
]]
Without a property name and type (getter/setter/method) I cannot safelist
certain properties that need to bypass this check. See
https://github.com/annevk/html-cross-origin-objects/issues/16#issuecomment-170851038
http://logs.glob.uno/?c=content#c350175
for context.
This would be used to compare against the [[crossOriginProperties]] slot of
Location and Window objects so some of their properties get to bypass the
security check. See
https://github.com/annevk/html-cross-origin-objects/blob/master/Location.md for
the tentative design of that slot on Location objects.
Would be great if we could resolve this somewhat quickly as this is in some
sense blocking the cross-origin work I'm trying to do for HTML.
--
You are receiving this mail because:
You are on the CC list for the bug.
Received on Tuesday, 12 January 2016 15:26:46 UTC