Re: [ServiceWorker] openWindow(url)'s same origin check should be done against the origin of the final response's url? (#646)

Even then you could get a redirect or what if that navigates through <a>.click()? Trying to restrict a Window to an origin seems like a rather novel primitive and discussion on blink-dev suggests it might go away. Might be best to just remove it from the specification.

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/646#issuecomment-77812717