Re: [ServiceWorker] self.caches should spec what to do for "untrusted" origins (#687)

I believe you pointed accessing to an off-origin iframe's objects from the calling frame will not be possible in the first place, and in this case neither can we manipulate the effective script origin as the origin is a unique identifier origin.

> what origin is actually used for the operation that can't be performed when that origin is a unique identifier

The operation we discuss to be not allowed against a unique identifier origin is accessing to the [_name to cache map_](https://slightlyoff.github.io/ServiceWorker/spec/service_worker/index.html#dfn-name-to-cache-map) internal slot which is defined as a per-origin cache storage. And as in [the previous comment ](https://github.com/slightlyoff/ServiceWorker/issues/687#issuecomment-96516567) in the thread, we're trying to make the methods (`self.caches.open(name)`, etc.) on the `CacheStorage` return a rejected promise instead of making the getter of the `CacheStorage` object (`self.caches`) itself throws.

As per your comment, I think using entry settings object here makes sense.

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/687#issuecomment-98587012