W3C home > Mailing lists > Public > public-webapps@w3.org > April to June 2014

[Bug 25987] New: Blob URL parsing / fetching model

From: <bugzilla@jessica.w3.org>
Date: Thu, 05 Jun 2014 08:43:23 +0000
To: public-webapps@w3.org
Message-ID: <bug-25987-2927@http.www.w3.org/Bugs/Public/>
https://www.w3.org/Bugs/Public/show_bug.cgi?id=25987

            Bug ID: 25987
           Summary: Blob URL parsing / fetching model
           Product: WebAppsWG
           Version: unspecified
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: File API
          Assignee: arun@mozilla.com
          Reporter: annevk@annevk.nl
        QA Contact: public-webapps-bugzilla@w3.org
                CC: glenn@zewt.org, jonas@sicking.cc,
                    public-webapps@w3.org
        Depends on: 25914
            Blocks: 24338

Given http://lists.w3.org/Archives/Public/public-webapps/2014AprJun/0683.html
we might need to revisit our strategy.

It seems we've already given the URL parser access to the global environment so
it can reach the blob URL store.

However, the scope of the blob URL store also encompasses global environments
that can be reached solely through document.domain and so not all of them are
same-origin. So I guess in addition a same-origin check is in order. I guess we
should do the same-origin check in the URL parser so it's deterministic.

And then fetching a URL which has an associated object will just never fail.

Does that make sense?

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Received on Thursday, 5 June 2014 08:43:25 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:14:24 UTC