W3C home > Mailing lists > Public > public-webappsec@w3.org > November 2014

Re: some testing on workers and sandbox

From: Anne van Kesteren <annevk@annevk.nl>
Date: Thu, 20 Nov 2014 10:55:15 +0100
Message-ID: <CADnb78gaoedu4q73uaW_vVsphoN6wL9iARhfPy77cbZF-ugXrA@mail.gmail.com>
To: Brad Hill <hillbrad@fb.com>
Cc: Boris Zbarsky <bzbarsky@mit.edu>, WebAppSec WG <public-webappsec@w3.org>
On Wed, Nov 19, 2014 at 11:59 PM, Brad Hill <hillbrad@fb.com> wrote:
> document.origin is always undefined in both FF and Chrome.

It's relatively new, and indeed not implemented yet :/

https://bugzilla.mozilla.org/show_bug.cgi?id=931884


> Also, event.origin
> (https://developer.mozilla.org/en-US/docs/Web/API/Window.postMessage#The_di
> spatched_event)
> is always an empty string for messages from Workers.  I guess it's
> unnecessary on the assumption that channels to Workers are always
> same-origin,
> but seems like that might hurt if any kind of non-same-origin Workers are
> defined?

Filed https://www.w3.org/Bugs/Public/show_bug.cgi?id=27377


-- 
https://annevankesteren.nl/
Received on Thursday, 20 November 2014 09:55:47 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:08 UTC