282387 2024-10-31 06:44:11 -0700 Consider using top-level site instead of origin when enforcing noopener on certain Blob URLs 2024-11-17 19:12:53 -0800 1 1 1 Unclassified WebKit Page Loading WebKit Nightly Build Unspecified Unspecified NEW InRadar P2 Normal --- 1 awillia webkit-unassigned achristensen annevk beidson charliew karlcow webkit-bug-importer wilander oldest_to_newest 2071861 0 awillia 2024-10-31 06:44:11 -0700 WebKit currently enforces noopener on Blob URL navigations when the Blob URL origin is cross-origin from the document top-level origin. Per the discussions in https://github.com/w3c/FileAPI/issues/153, we are in the process of updating the HTML spec to specify this behavior except using sites instead of origins (see: https://github.com/whatwg/html/pull/10731). https://github.com/w3c/FileAPI/issues/153#issuecomment-2332086739 indicates that WebKit might be open to using site instead of origin for this as well. Opening this bug for tracking. 2073477 1 webkit-bug-importer 2024-11-07 05:45:17 -0800 <rdar://problem/139430442>