Re: [w3c/ServiceWorker] consider allow late importScripts/import for local URLs (#1595)

> My worry is allowing blob URLs to work temporarily and then later not being able to prevent them from working.

Don't you already have that problem with `SharedWorker`?  A `SharedWorker` can be in a different agent cluster and I believe blob URL works for `importScripts()` there already.

It seems to me the best approach for your concern would be to get to consensus in w3c/FileAPI#153 whether to attempt agent cluster isolation or not.  And if you want to attempt it, then you can get consensus there to not implement blob URL loading in service workers for now.  But that seems orthogonal to whether to support late loading of local URLs in service workers.

But if you can at least get consensus to try then implementations could have a check for blob's in the service worker code with a TODO comment saying that this should be converted to an agent cluster check in the blob loader in the future.

I think in the end, though, this kind of restriction should be part of the blob spec/impl and not buried in some exceptional if-statement in the middle of the service worker spec/impl.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/1595#issuecomment-883440301