[Webkit-unassigned] [Bug 170075] Can not read blobs in sandboxed iframes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=170075

--- Comment #7 from youenn fablet <youennf at gmail.com> ---
Right, the issue is that the blob URL is something like blob://null/UUID so is considered "Not TrustedWorthy".
Chrome and Firefox seems to be treating it as trustworthy, probably because the context that created the blob is secure context.

I filed https://github.com/w3c/webappsec-mixed-content/issues/41 to clarify this since the specs are not super clear to me.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210301/ae4b9d66/attachment.htm>