Re: [ServiceWorker] Should window.caches be removed (or readonly) for security reasons? (#698)

> I guess I would prefer something like this to just completely banning caches on window/worker.

Yeah, I don't want that either. The read-only idea would be a temporary measure until we have a solution to the attack. Going read-only is easier to revert than adding a new API. But going read only may be an overreaction because other storage APIs are just as vulnerable.

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/698#issuecomment-110294327