Re: Frame Ancestors and Referrer (Re: [webappsec] Call for Consensus: Stop work on Content Security Policy 1.0, transition to WG Note)

On 10/24/14, 7:13 AM, Anne van Kesteren wrote:
> We might be ready to reconsider this.

For some values of "we"... ;)

> I was wondering though whether
> the API can still be made asynchronous given everyone's out-of-process
> <iframe> aspirations.

Why bother?

The returned thing is an invariant of the browsing context (and hence of 
any Window in that browsing context, etc).  So you can just save it when 
initially creating the browsing context and then you always have it 
in-process when you need it, I think.

-Boris