Re: [slightlyoff/ServiceWorker] clarify secure context requirements in Handle Fetch (#890)

Great catch. And ughhghghgh. Of course, a navigation to a secure origin with no means to communicate with the window that initiated the request should be considered secure.

I'm grumpy about the `target="_blank"` case here. Seems shitty that another website can stop my service worker working. We might need some kind of registration option to declaratively disown opener.

Related, but won't work for us https://github.com/w3c/webappsec/issues/517

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/890#issuecomment-234972242