[Webkit-unassigned] [Bug 90613] Inside a sandboxed iframe, it should be possible to create another iframe and access it

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=90613





--- Comment #4 from Adam Barth <abarth at webkit.org>  2012-07-09 13:57:37 PST ---
In <http://html.spec.whatwg.org/#origin>, what would happen if we moved this statement to the top:

If a Document has the address "about:blank"
-> The origin and effective script origin of the Document are those it was assigned when its browsing context was created.

That doesn't quite work because <iframe sandbox src="about:blank"></iframe> wouldn't get a unique origin, so we'd have to do something in that case...

It's definitely messy and might not be worth the risk.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.