[Webkit-unassigned] [Bug 67978] WebWorkers fail with document.domain set when accessing from subdomain

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=67978





--- Comment #2 from Andrew Wilson <atwilson at chromium.org>  2011-09-12 23:45:20 PST ---
According to an email conversation with the reporter, this happens in both Chromium and Safari. I'm guessing our logic in AbstractWorker::resolveUrl() is to blame - specifically:

   if (!scriptExecutionContext()->securityOrigin()->canAccess(SecurityOrigin::create(scriptURL).get())) {                                                     
        ec = SECURITY_ERR;                                                      
        return KURL();                                                          
    }             

Not sure why securityOrigin()->canAccess() would return false in this case.

Agreed that it'd be nice to have source code for a fail case.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.