Re: [w3c/manifest] Explicitly block opaque origins from requesting manifests (#638) from Dominick Ng on 2018-01-18 (public-webapps-github@w3.org from January 2018)

From: Dominick Ng <notifications@github.com>
Date: Thu, 18 Jan 2018 05:02:40 +0000 (UTC)
To: w3c/manifest <manifest@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <w3c/manifest/pull/638/c358538533@github.com>

Thanks! Opaque origins are pretty well defined in the HTML spec - e.g. <iframe sandbox> and Content-Security-Policy: sandbox. They're for cases where the frame is explicitly opted into having an opaque origin (i.e. only same-origin with itself).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/pull/638#issuecomment-358538533

Received on Thursday, 18 January 2018 05:03:02 UTC