Re: Frame Ancestors and Referrer (Re: [webappsec] Call for Consensus: Stop work on Content Security Policy 1.0, transition to WG Note)

On Fri, Oct 24, 2014 at 11:52 AM, Mike West <mkwst@google.com> wrote:
> WebKit and Blink/Opera implement `window.location.ancestorOrigins`, which
> might help you here. Firefox has (quite plausible) privacy concerns with
> that API.

We might be ready to reconsider this. I was wondering though whether
the API can still be made asynchronous given everyone's out-of-process
<iframe> aspirations.


-- 
https://annevankesteren.nl/