W3C home > Mailing lists > Public > whatwg@whatwg.org > October 2011

[whatwg] Same origin - Blob and FileSystem URLs

From: Kyle Huey <me@kylehuey.com>
Date: Wed, 12 Oct 2011 10:32:56 -0400
Message-ID: <CAP045AoA+rpw5qpMT2sJxSt2x6=VRXYD91S5-ZhZOKpd80jzKg@mail.gmail.com>
2011/10/12 Bronislav Klu?ka <Bronislav.Klucka at bauglir.com>

> Hello
> Certain parts of spesc are covering how to work with resources identified
> by URL and same-origin issue (download attribute, canvas)
> looking at same-origin algorithm
> http://www.whatwg.org/specs/**web-apps/current-work/**
> multipage/origin-0.html#same-**origin<http://www.whatwg.org/specs/web-apps/current-work/multipage/origin-0.html#same-origin>
> I'm wondering about Blob URL and FileSystem API URL. Those are not
> conventional URL but they are named as "URL" and one can work with them the
> same as with regular URL. How does the same-origin policy apply to those
> URLs?
>
> Bronislav Klucka
>
>
Per spec, Blob URIs are same origin with the script that created them.  See
http://dev.w3.org/2006/webapi/FileAPI/#originOfBlob

- Kyle
Received on Wednesday, 12 October 2011 07:32:56 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:59:37 UTC