<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>180446</bug_id>
          
          <creation_ts>2017-12-05 14:16:00 -0800</creation_ts>
          <short_desc>XMLHttpRequest should not be exposed to service workers</short_desc>
          <delta_ts>2017-12-05 14:47:20 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebCore Misc.</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Chris Dumez">cdumez</reporter>
          <assigned_to name="Chris Dumez">cdumez</assigned_to>
          <cc>beidson</cc>
    
    <cc>commit-queue</cc>
    
    <cc>esprehn+autocc</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>ggaren</cc>
    
    <cc>kondapallykalyan</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>youennf</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1378358</commentid>
    <comment_count>0</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2017-12-05 14:16:00 -0800</bug_when>
    <thetext>XMLHttpRequest should not be exposed to service workers:
- https://xhr.spec.whatwg.org/#interface-xmlhttprequest</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1378368</commentid>
    <comment_count>1</comment_count>
      <attachid>328502</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2017-12-05 14:25:44 -0800</bug_when>
    <thetext>Created attachment 328502
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1378378</commentid>
    <comment_count>2</comment_count>
      <attachid>328502</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2017-12-05 14:46:11 -0800</bug_when>
    <thetext>Comment on attachment 328502
Patch

Clearing flags on attachment: 328502

Committed r225549: &lt;https://trac.webkit.org/changeset/225549&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1378379</commentid>
    <comment_count>3</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2017-12-05 14:46:13 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1378381</commentid>
    <comment_count>4</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2017-12-05 14:47:20 -0800</bug_when>
    <thetext>&lt;rdar://problem/35865533&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>328502</attachid>
            <date>2017-12-05 14:25:44 -0800</date>
            <delta_ts>2017-12-05 14:46:11 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-180446-20171205142543.patch</filename>
            <type>text/plain</type>
            <size>3237</size>
            <attacher name="Chris Dumez">cdumez</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjI1NTMxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>