[Webkit-unassigned] [Bug 240016] New: BroadcastChannel instance in data URL dedicated worker can communicate with creator context

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=240016

            Bug ID: 240016
           Summary: BroadcastChannel instance in data URL dedicated worker
                    can communicate with creator context
           Product: WebKit
           Version: Safari Technology Preview
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: awillia at google.com

I wrote a test to determine whether a BroadcastChannel instance inside of a data URL dedicated worker can communicate with an instance in the site that created it, and it looks like it can in Safari Tech Preview 144:

https://wpt.fyi/results/webmessaging/broadcastchannel/opaque-origin.html?label=experimental&label=master&aligned

A data URL worker should have a unique opaque origin and shouldn't be able to communicate with a BroadcastChannel instance in the creator document, per the HTML standard.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220503/0ae31baf/attachment.htm>