Re: [w3c/ServiceWorker] Create service worker from Blob/String URL (#578)

There is more probability in being infected by the server in the long run if things are mutable

An immutable service worker implies an immutable webapp if cached properly

This would annihilate any possibility of server-side attack once first downloaded

Also if your webapp is infected (via XSS or supply-chain), it's probably already game over

Just let the developer choose between mutable and immutable service workers

The developer is probably the best person to evaluate such risk-benefit

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/578#issuecomment-2295736961
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/ServiceWorker/issues/578/2295736961@github.com>