Re: [ServiceWorker] self.caches should spec what to do for "untrusted" origins (#687)

I think [this example](https://html.spec.whatwg.org/multipage/webappapis.html#incumbent-settings-object) explains. So in our case here:

```js
<!-- a/a.html -->
<iframe src="b.html"></iframe>
<script>
var subframe = document.getElementsByTagName("iframe")[0];
subframe.contentWindow.caches.open(name);
</script>
```
the origin check should be done against the subframe's global object rather than the callingframe's one. Am I misunderstanding?

Curious to know what you've discussed with @bzbarsky. Do you have any pointer?

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/687#issuecomment-97752545