Re: [w3c/ServiceWorker] reserved Client objects and redirected navigations (#1031)

For added fun, @bzbarsky posed this question while implementing this:

If a sandboxed iframe is loads foo.com and it redirects to another foo.com URL, is that considered same-origin or cross-origin?

My initial implementation in gecko is going to treat it as cross-origin since sandboxed iframes use opaque origins.  What do people think?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/1031#issuecomment-278060617