[Webkit-unassigned] [Bug 20701] localStorage not working for file:// based URLs or http:// based URLs loaded from localhost

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun May 31 13:08:00 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=20701





------- Comment #6 from abarth at webkit.org  2009-05-31 13:07 PDT -------
(In reply to comment #5)
> FYI, this is why I thought it might be per file:
> https://developer.mozilla.org/En/Same-origin_policy_for_file:_URIs  I guess
> Mozilla is breaking from the spec?

Many of the browser vendors would like to lock down file URL access more. 
Mozilla is experimenting with a tighter security policy.  My understanding is
that their experiment is fairly successful.  It might be getting to be time to
revisit this issue more broadly.  For this patch, though, we should stick with
WebKit's current security policy.  We can always change it later if and when we
revise the access policy for file URLs in general.

(As for what the specs say, they are silent on this point.  More precisely,
they say the behavior is implementation-defined.)


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list