CSP, Blob Workers, and Firefox

I've got an edge case that the Firefox guys see as undefined in the CSP
spec.

Bug report here: https://bugzilla.mozilla.org/show_bug.cgi?id=964276

Shouldn't blob URIs take the origin that they've been created within? If
so, script-src 'self' ought to allow the Worker to load.

Paul F

Received on Saturday, 19 April 2014 13:59:14 UTC