New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Worker data: url is opaque cross origin right? #8986

Open

hamishwillee opened this issue Mar 5, 2023 · 1 comment

hamishwillee commented Mar 5, 2023 •

edited

MDN Worker() docs have this note, which I believe to be incorrect:

From the spec my understanding is that:

data: urls create a worker that has an opaque origin
Therefore the worker is cross-origin from its owner.
So you can use the URL but you're subject to the normal same origin policy restrictions
But in future the intent is that you can use Permission-Policy to allow less restricted access.

So in summary "you can use data: urls but these are subject to cross-origin restrictions". The note should be removed.

Is that about right?

The text was updated successfully, but these errors were encountered:

hamishwillee mentioned this issue

[Behind Pref] [Web API] Implement worker modules mdn/content#24402

Closed

10 tasks

Member

annevk commented Mar 11, 2023

#5254 is still a problem. Maybe I should try to push for fixing that again.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment