Bug 240016
| Summary: | BroadcastChannel instance in data URL dedicated worker can communicate with creator context | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Andrew Williams <awillia> |
| Component: | New Bugs | Assignee: | Chris Dumez <cdumez> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | achristensen, cdumez, webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | Safari Technology Preview | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Andrew Williams
I wrote a test to determine whether a BroadcastChannel instance inside of a data URL dedicated worker can communicate with an instance in the site that created it, and it looks like it can in Safari Tech Preview 144:
https://wpt.fyi/results/webmessaging/broadcastchannel/opaque-origin.html?label=experimental&label=master&aligned
A data URL worker should have a unique opaque origin and shouldn't be able to communicate with a BroadcastChannel instance in the creator document, per the HTML standard.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Chris Dumez
Pull request: https://github.com/WebKit/WebKit/pull/484
EWS
Committed r293841 (250314@main): <https://commits.webkit.org/250314@main>
Reviewed commits have been landed. Closing PR #484 and removing active labels.
Radar WebKit Bug Importer
<rdar://problem/92801721>