On Mon, Apr 27, 2015 at 7:00 AM, Anne van Kesteren <ann...@annevk.nl> wrote: > Currently Chrome supports data URLs inside EventSource whereas in > Firefox EventSource is restricted to http/https URLs: > > https://bugzilla.mozilla.org/show_bug.cgi?id=1156137 > > What's the convergence we want here?
It's rather frustrating when data: urls don't work in various places; they're an invaluable debugging tool, at minimum. They should generally be treated as the same security level as the page, no? ~TJ