Re: [CSP] Directive to disallow a response from being used as a Service Worker

On Tue, Jul 29, 2014 at 6:35 PM, Brad Hill <hillbrad@gmail.com> wrote:
> I think the requirement that service workers be same-origin means that
> content sandboxed to a unique origin not being able to load a service
> worker is a consequence that just naturally falls out.

Elsewhere it was interpreted that the SW resource carrying this header
would have this meaning. I agree that it would probably naturally fall
out from the page resource carrying this header. (I have not checked
the algorithms.)


-- 
http://annevankesteren.nl/

Received on Tuesday, 29 July 2014 16:48:10 UTC