[Webkit-unassigned] [Bug 145692] Scripts with protocol-relative URLs fail to load in about:blank
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Jun 12 12:07:20 PDT 2015
https://bugs.webkit.org/show_bug.cgi?id=145692
--- Comment #4 from Jon <x at jx0.co> ---
I think the spec as written describes generally helpful behavior. The "promise" of a protocol-relative URL is that you can address content which can be served via either http or https and have things "just work". Which to my mind, ideally means using the protocol of the closest containing browsing context which actually addresses remote (or local in the case of file:) content. Specifically, you'd get a mixed content warning if you loaded an http resource inside an https iframe, even if there are several friendly iframes contexts in the middle. The implicit assumption is that the friendly iframes have "inherited" the https context in some sense.
Either way though, the current behavior is at least inconsistent. A script with a protocol-relative URL loaded in a single friendly iframe doesn't pick up the about: protocol. So there is some idea in that case that about:blank is not a useful base URL. It's only if the next containing browsing context happens to also be about: that we end up hitting this issue.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150612/84c689af/attachment.html>
More information about the webkit-unassigned
mailing list