Re: [whatwg/fetch] Treat data URLs as same-origin, except for workers (#387)

Proposed commit message:
```
Treat data URLs as same-origin

By-and-large browsers treat data URLs as same-origin, though there 
are some inconsistencies. This change will treat all data URLs, 
regardless of origin, as same-origin from the perspective of Fetch.

HTML will assign a unique opague origin to documents and dedicated
workers created from a data URL.

HTML will also forbid shared workers to be created from data URLs.

See https://github.com/whatwg/html/pull/1782 for the changes made to
HTML.

Service workers already prevent anything but HTTP(S) URLs from 
creating them.

Fixes #381.
```

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/387#issuecomment-247324822

Received on Thursday, 15 September 2016 13:17:00 UTC