Re: [slightlyoff/ServiceWorker] clarify secure context requirements in Handle Fetch (#890)

> I believe it's to stop the non-secure origin getting data from powerful features by poseMessage-talking to the iframe.

Notice the non-secure origin can not get data this way, getting data is only possible if the safe origin decides to send that data via `postMessage()` to `.opener` / `.parent`. Preventing HTTPS sites to communicate with HTTP sites seems to be another different issues.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/890#issuecomment-235662836