- From: <bugzilla@jessica.w3.org>
- Date: Thu, 05 Jun 2014 08:43:23 +0000
- To: public-webapps@w3.org
https://www.w3.org/Bugs/Public/show_bug.cgi?id=25987 Bug ID: 25987 Summary: Blob URL parsing / fetching model Product: WebAppsWG Version: unspecified Hardware: PC OS: All Status: NEW Severity: normal Priority: P2 Component: File API Assignee: arun@mozilla.com Reporter: annevk@annevk.nl QA Contact: public-webapps-bugzilla@w3.org CC: glenn@zewt.org, jonas@sicking.cc, public-webapps@w3.org Depends on: 25914 Blocks: 24338 Given http://lists.w3.org/Archives/Public/public-webapps/2014AprJun/0683.html we might need to revisit our strategy. It seems we've already given the URL parser access to the global environment so it can reach the blob URL store. However, the scope of the blob URL store also encompasses global environments that can be reached solely through document.domain and so not all of them are same-origin. So I guess in addition a same-origin check is in order. I guess we should do the same-origin check in the URL parser so it's deterministic. And then fetching a URL which has an associated object will just never fail. Does that make sense? -- You are receiving this mail because: You are on the CC list for the bug.
Received on Thursday, 5 June 2014 08:43:25 UTC