20701 2008-09-07 12:10:45 -0700 localStorage not working for file:// based URLs or http:// based URLs loaded from localhost 2009-06-01 19:11:17 -0700 1 1 1 Unclassified WebKit DOM 528+ (Nightly build) All All RESOLVED FIXED P2 Normal --- 0 bedney webkit-unassigned abarth beidson ddkilzer jorlow oldest_to_newest 90421 0 bedney 2008-09-07 12:10:45 -0700 Folks - I've attached a testcase that shows that localStorage, as its currently implemented, is not working for pages loaded from file:// URLs or from a local web server (i.e. 'localhost'). I filed a comment on this Mozilla bug (comment #9) wherein I note that the HTML5 specification has the concept of a 'file://' origin - therefore this feature should work for these kinds of origins too. No idea why 'http://localhost' is failing. Obviously, the way to run this testcase is to bring the page up, set the value, verify that the value is set, quit your browser, restart and click the button to show the value. Thanks!! Cheers, - Bill 90422 1 23229 bedney 2008-09-07 12:12:01 -0700 Created attachment 23229 Testcase showing localStorage not working for file:// or http://localhost URLs 90423 2 bedney 2008-09-07 12:13:14 -0700 Forgot to attach the Mozilla bug URL (my comment is #9) https://bugzilla.mozilla.org/show_bug.cgi?id=422526 Cheers, - Bill 123728 3 jorlow 2009-05-31 04:08:09 -0700 As far as I can tell, each file:// url should be its own origin. Can you please confirm this is correct? I'll look into fixing this in the next couple days (or possibly as part of this work: https://bugs.webkit.org/show_bug.cgi?id=25376). 123741 4 abarth 2009-05-31 10:09:52 -0700 (In reply to comment #3) > As far as I can tell, each file:// url should be its own origin. Can you > please confirm this is correct? That is incorrect. All file URLs inhabit the same origin. Yes, that's a bit unfortunate. 123747 5 jorlow 2009-05-31 12:18:40 -0700 That is unfortunate. FYI, this is why I thought it might be per file: https://developer.mozilla.org/En/Same-origin_policy_for_file:_URIs I guess Mozilla is breaking from the spec? 123750 6 abarth 2009-05-31 13:07:59 -0700 (In reply to comment #5) > FYI, this is why I thought it might be per file: > https://developer.mozilla.org/En/Same-origin_policy_for_file:_URIs I guess > Mozilla is breaking from the spec? Many of the browser vendors would like to lock down file URL access more. Mozilla is experimenting with a tighter security policy. My understanding is that their experiment is fairly successful. It might be getting to be time to revisit this issue more broadly. For this patch, though, we should stick with WebKit's current security policy. We can always change it later if and when we revise the access policy for file URLs in general. (As for what the specs say, they are silent on this point. More precisely, they say the behavior is implementation-defined.) 123912 7 jorlow 2009-06-01 19:02:55 -0700 I tried this out on my mac with the nightly build and it all works as expected (including all files sharing the same localStorage namespace). I don't think there's anything left to do here, but I don't have permissions to close the bug. 123913 8 abarth 2009-06-01 19:11:17 -0700 Marking as fixed per comment #7. 23229 2008-09-07 12:12:01 -0700 2008-09-07 12:12:01 -0700 Testcase showing localStorage not working for file:// or http://localhost URLs localstoragetest.html text/html 408 bedney PGh0bWw+Cgk8aGVhZD4KCQoJPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPgoJZnVuY3Rp b24gc3RvcmVWYWx1ZSgpCgl7CgkJd2luZG93LmxvY2FsU3RvcmFnZS5zZXRJdGVtKCdmb28nLCAn YmFyJyk7Cgl9OwoJZnVuY3Rpb24gYWxlcnRWYWx1ZSgpCgl7CgkJYWxlcnQod2luZG93LmxvY2Fs U3RvcmFnZS5nZXRJdGVtKCdmb28nKSk7Cgl9OwoJPC9zY3JpcHQ+CgoJPC9oZWFkPgoJCgk8Ym9k eT4KCQk8YnV0dG9uIG9uY2xpY2s9InN0b3JlVmFsdWUoKSI+U2F2ZSAnYmFyJyB0byAnZm9vJyBp biBsb2NhbFN0b3JhZ2UuPC9idXR0b24+CgkJPGJ1dHRvbiBvbmNsaWNrPSJhbGVydFZhbHVlKCki PkFsZXJ0IHZhbHVlIG9mICdmb28nIGluIGxvY2FsU3RvcmFnZS48L2J1dHRvbj4KCTwvYm9keT4K CjwvaHRtbD4K