W3C home > Mailing lists > Public > public-webappsec@w3.org > November 2013

Re: ACTION-146, propose spec text for Workers

From: Anne van Kesteren <annevk@annevk.nl>
Date: Thu, 21 Nov 2013 11:08:17 +0000
Message-ID: <CADnb78hJWn1MKfW4cKth9DFofPg9b9e0bbhP_cVxhbiYCy9-JQ@mail.gmail.com>
To: Ian Hickson <ian@hixie.ch>
Cc: Daniel Veditz <dveditz@mozilla.com>, Brad Hill <hillbrad@gmail.com>, "public-webappsec@w3.org" <public-webappsec@w3.org>
On Wed, Nov 20, 2013 at 6:49 PM, Ian Hickson <ian@hixie.ch> wrote:
> Any URL that has the same origin as the incumbent settings object when the
> worker is created should work fine. I don't know what defines the origin
> of blob: URLs, but if they're same-origin URLs, they should work fine, per
> the worker spec.

How would you define that? If you compute the origin of a URL,
independent of anything else, a blob URL obviously yields a unique
identifier. We can say that when fetched, a blob URL returns an
untainted response (its type is not error), and therefore works.


-- 
http://annevankesteren.nl/
Received on Thursday, 21 November 2013 11:08:44 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:03 UTC