Re: [w3c/ServiceWorker] consider allow late importScripts/import for local URLs (#1595)

Then it seems like letting local URL's be imported whenever is fine.  I do wonder if it might make sense to be conservative and also define that the local URL must also be same-origin.  This would mainly be to help side-step issues like extensions depending on the script resources of other extensions.  (Maybe this is forbidden in practice by the underlying extension schemes, but there's no spec yet to clarify that.)  This would forbid data URLs for late import as a side effect, but I'm not sure that's a bad thing, as it seems desirable to instead let import take Blobs or Responses or anything other than enabling createObjectURL or incentivizing data URLs (which can be a strain on devtools / introspection tools that don't optimize for multi-megabyte URLs).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/1595#issuecomment-865232110