Re: [ServiceWorker] ServiceWorker scriptURL XSS Filtering (#743)

The restrictions are proposed for both query string parameter names and values, correct?

In the `<platinum-sw>` use case:
- query string parameter names are present in the [underlying service worker script](https://github.com/PolymerElements/platinum-sw/blob/master/service-worker.js), but all are currently < 20 bytes.
- query string parameter values are **not** present in the [underlying service worker script](https://github.com/PolymerElements/platinum-sw/blob/master/service-worker.js), but are commonly > 20 bytes.

Just throwing this out there as an example of how URL query string parameters are being used "in the wild". Using the URL query string to configure the behavior of the underlying service worker leads to a pretty nice developer experience, and I wouldn't be surprised if other library developers adopt a similar approach.

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/743#issuecomment-136745915