[Webkit-unassigned] [Bug 170075] Can not read blobs in sandboxed iframes

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Feb 27 15:26:29 PST 2018


https://bugs.webkit.org/show_bug.cgi?id=170075

--- Comment #3 from John Firebaugh <john.firebaugh at gmail.com> ---
This effectively prevents the use of web workers within <iframe sandbox="allow-scripts">:

1. Initializing the Worker with a blob URI doesn't work due to this bug.
2. Initializing the Worker with a http[s] URI doesn't work because without allow-same-origin, the iframe has a null origin, and Worker scripts are required to be same-origin.
3. WebKit does not support initializing the Worker with a data URI.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180227/3fdaa525/attachment-0001.html>


More information about the webkit-unassigned mailing list