On 12.10.2011 16:32, Kyle Huey wrote:
2011/10/12 Bronislav Klučka<[email protected]>
Hello
Certain parts of spesc are covering how to work with resources identified
by URL and same-origin issue (download attribute, canvas)
looking at same-origin algorithm
http://www.whatwg.org/specs/**web-apps/current-work/**
multipage/origin-0.html#same-**origin<http://www.whatwg.org/specs/web-apps/current-work/multipage/origin-0.html#same-origin>
I'm wondering about Blob URL and FileSystem API URL. Those are not
conventional URL but they are named as "URL" and one can work with them the
same as with regular URL. How does the same-origin policy apply to those
URLs?
Bronislav Klucka
Per spec, Blob URIs are same origin with the script that created them. See
http://dev.w3.org/2006/webapi/FileAPI/#originOfBlob
- Kyle
May I assume that
http://www.w3.org/TR/file-system-api/#widl-Entry-toURL
is also the same-origin as the originator script origin?
Brona
