- From: Bronislav Klučka <Bronislav.Klucka@bauglir.com>
- Date: Wed, 12 Oct 2011 16:39:30 +0200
On 12.10.2011 16:32, Kyle Huey wrote: > 2011/10/12 Bronislav Klu?ka<Bronislav.Klucka at bauglir.com> > >> Hello >> Certain parts of spesc are covering how to work with resources identified >> by URL and same-origin issue (download attribute, canvas) >> looking at same-origin algorithm >> http://www.whatwg.org/specs/**web-apps/current-work/** >> multipage/origin-0.html#same-**origin<http://www.whatwg.org/specs/web-apps/current-work/multipage/origin-0.html#same-origin> >> I'm wondering about Blob URL and FileSystem API URL. Those are not >> conventional URL but they are named as "URL" and one can work with them the >> same as with regular URL. How does the same-origin policy apply to those >> URLs? >> >> Bronislav Klucka >> >> > Per spec, Blob URIs are same origin with the script that created them. See > http://dev.w3.org/2006/webapi/FileAPI/#originOfBlob > > - Kyle May I assume that http://www.w3.org/TR/file-system-api/#widl-Entry-toURL is also the same-origin as the originator script origin? Brona
Received on Wednesday, 12 October 2011 07:39:30 UTC