W3C home > Mailing lists > Public > public-webapps@w3.org > April to June 2014

Re: Blob URL Origin

From: Anne van Kesteren <annevk@annevk.nl>
Date: Thu, 15 May 2014 15:52:48 +0200
Message-ID: <CADnb78gFm2SRrREUnPS0h_KEPH43ZcnrN16dAx_+9s3N=FwE3w@mail.gmail.com>
To: Jonas Sicking <jonas@sicking.cc>
Cc: Boris Zbarsky <bzbarsky@mit.edu>, Frederik Braun <fbraun@mozilla.com>, WebApps WG <public-webapps@w3.org>
On Tue, May 13, 2014 at 6:57 PM, Jonas Sicking <jonas@sicking.cc> wrote:
> On Tue, May 13, 2014 at 6:00 AM, Anne van Kesteren <annevk@annevk.nl> wrote:
>> We don't want new URL() to take ownership of the Blob object, so
>> making new URL() reflect the origin of whoever created the uuid for
>> the Blob object seems weird.
> Why would it need to "take ownership of the Blob object"? First of
> all, the origin of the blob: url is determined by who called
> createObjectURL, not who owns the Blob instance. Hence you don't
> actually need to touch the Blob instance to figure out the origin, but
> rather just inspect the url itself (if we use explicit origin syntax),
> or look up the origin in the internal url->Blob table (if we use
> implicit origin syntax).

I was thinking about the latter and that would not work if the URL was
revoked. Unless we store origin at parse time.

Received on Thursday, 15 May 2014 13:53:15 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:14:24 UTC