Re: [heycam/webidl] Should perform security check for constructors (#249)

@zcorpan Perform a security check on what?  Why would we want to do that at all?  Note that your testcase never even calls the WebSocket constructor, so I'm not sure why it's relevant to this bug.  A testcase that _does_ call it is http://software.hixie.ch/utilities/js/live-dom-viewer/saved/4721 and that one would be problematic even if the navigation were to a same-origin page: either way the websocket would stay alive forever per spec.  See https://github.com/whatwg/html/issues/2153 that I just filed.

@tobie, the check you describe would always pass, no?



-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/heycam/webidl/issues/249#issuecomment-265815168