[whatwg] Accessing cookies from workers
jonas at sicking.cc
Thu Mar 5 17:35:19 PST 2009
On Thu, Mar 5, 2009 at 5:33 PM, Michael Nordman <michaeln at google.com> wrote:
> On Thu, Mar 5, 2009 at 5:23 PM, Michael Nordman <michaeln at google.com> wrote:
>>> Allowing cookie to be set would unfortunately create a synchronous
>>> communication channel between the worker and the main window. This is
>>> something that we need to avoid to prevent users from having to deal
>>> with locking and other thread related issues.
>> Hmmm... the cookie setting API could be async in workers.
> In the absence of providing such an API, one exists (provided network
> connectivity) indirectly in the form the XHR... ask the server to
> either read or set cookies values for you.
Gecko, and I believe the latest XHR spec drafts, have disabled access
to cookies through XHR in order to prevent leaking of HTTPOnly
More information about the whatwg