W3C home > Mailing lists > Public > whatwg@whatwg.org > October 2011

[whatwg] Same origin - Blob and FileSystem URLs

From: Bronislav Klučka <Bronislav.Klucka@bauglir.com>
Date: Wed, 12 Oct 2011 16:39:30 +0200
Message-ID: <4E95A6A2.20001@bauglir.com>


On 12.10.2011 16:32, Kyle Huey wrote:
> 2011/10/12 Bronislav Klu?ka<Bronislav.Klucka at bauglir.com>
>
>> Hello
>> Certain parts of spesc are covering how to work with resources identified
>> by URL and same-origin issue (download attribute, canvas)
>> looking at same-origin algorithm
>> http://www.whatwg.org/specs/**web-apps/current-work/**
>> multipage/origin-0.html#same-**origin<http://www.whatwg.org/specs/web-apps/current-work/multipage/origin-0.html#same-origin>
>> I'm wondering about Blob URL and FileSystem API URL. Those are not
>> conventional URL but they are named as "URL" and one can work with them the
>> same as with regular URL. How does the same-origin policy apply to those
>> URLs?
>>
>> Bronislav Klucka
>>
>>
> Per spec, Blob URIs are same origin with the script that created them.  See
> http://dev.w3.org/2006/webapi/FileAPI/#originOfBlob
>
> - Kyle

May I assume that
http://www.w3.org/TR/file-system-api/#widl-Entry-toURL
is also the same-origin as the originator script origin?

Brona
Received on Wednesday, 12 October 2011 07:39:30 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:59:37 UTC