[whatwg/storage] Make "site storage quota" less susceptible to side-channel attacks (#70)

It's (somewhat encouraged to be) a global limit and as @tomvangoethem has pointed out, this can lead to cross-origin leaks (XSLeaks).

An approach here would be to support specific values for largish ever-increasing-in-size ranges, perhaps even define these in the specification so they are identical across user agents.

This relates to #31, but that focuses more on "site storage usage".

cc @whatwg/security 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/storage/issues/70

Received on Monday, 20 May 2019 13:24:05 UTC