[Webkit-unassigned] [Bug 71802] worker do not work from dataURI

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=71802


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |abarth at webkit.org,
                   |                            |ap at webkit.org,
                   |                            |jonas at sicking.cc




--- Comment #2 from Alexey Proskuryakov <ap at webkit.org>  2011-11-08 10:02:04 PST ---
Why are you saying that this should work? HTML5 is very specific that it's not allowed.

It's curious that Mozilla folks decided to diverge from the spec, especially without ever mentioning a rationale. The only discussion of this proposal on standards list that I could find ended with the idea being rejected.

-----------------------------

When the Worker(scriptURL) constructor is invoked, the user agent must run the following steps:

1. Resolve the scriptURL argument relative to the entry script's base URL, when the method is invoked.

2. If this fails, throw a SyntaxError exception.

3. If the origin of the resulting absolute URL is not the same as the origin of the entry script, then throw a SecurityError exception.

Thus, scripts must be external files with the same scheme as the original page: you can't load a script from a data: URL or javascript: URL, and an https: page couldn't start workers using scripts with http: URLs.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.