[Bug 24998] What is the origin of a blob: URL?

https://www.w3.org/Bugs/Public/show_bug.cgi?id=24998

--- Comment #2 from Arun <arun@mozilla.com> ---
(In reply to Arun from comment #1)
> Some have argued (Cc annevk)

(I'm sorry, I inadvertently submitted too soon).

Some have argued (Cc annevk) that blob: URLs shouldn't have origin strictures,
and be like data: URLs.

The spec originally specified Blob URLs to be origin-restricted to having the
same origin as the script that invoked URL.createObjectURL.

Jonas points out that data: URLs are a poor role model, since they are
inconsistently implemented across UAs. 

On balance, I think I should add the same origin restriction as we originally
had, namely origin-restriction to the origin of the script which calls
URL.create*.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Monday, 10 March 2014 22:28:59 UTC