Re: [ServiceWorker] Should window.caches be removed (or readonly) for security reasons? (#698)

> Confining access to service workers is not a defense mechanism. Anything that works there should go on window as well, and vice versa.

Why not? The context of the page is not safe. The context of the service worker should be safe (HTTPS-only; only explicit message passing).

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/698#issuecomment-106573556