[Webkit-unassigned] [Bug 94171] Allow blocking of IndexedDB in third-party contexts

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=94171





--- Comment #4 from Jeffrey Pfau <jeffrey at endrift.com>  2012-08-29 17:18:01 PST ---
(In reply to comment #1)
> Looks like this could be done in DOMWindowIndexedDatabase::webkitIndexedDB and WorkerContextIndexedDatabase::webkitIndexedDB to forbid access to the IDBFactory itself.
> 
> (Alternately, the checks could be added to IDBFactory.cpp's isContextValid(ScriptContext*) function which all IDBFactory methods call, but that doesn't seem to be the pattern used elsewhere.)
> 
> jeffrey@ - were you planning to take this on?

I haven't taken a deep look at what the spec says about how errors should be handled, but it seems like the best way to go about this is to return an error when attempting to open a database. It's probably also a good idea to check per call (as it looks like the spec might allow this)--this isn't done in other places because in many cases the spec does not give allowances that would let us do this.

I was also not planning on implementing this soon. It looks like work on IndexedDB is currently very active, so it might be better for someone more involved in that work to do this.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.