[manifest] From a security perspective, why should the manifest be same origin? (#375)

What are the attack vectors when the manifest is or isn't same origin. 

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/375

Received on Wednesday, 29 April 2015 16:31:44 UTC