[whatwg] postMessage's target origin argument can be a full URL in some implementations

Sigbjorn Finne sigbjorn.finne at gmail.com
Wed Aug 11 11:22:11 PDT 2010


On 8/11/2010 06:58, Adam Barth wrote:
> On Tue, Aug 10, 2010 at 9:28 PM, Boris Zbarsky <bzbarsky at mit.edu> wrote:
>   
>> On 8/10/10 9:11 PM, Ian Hickson wrote:
>>     
>>> Specifically, this means the magic "/" string is no longer supported
>>>       
>> Why?  That seemed like a useful feature, and not something likely to break
>> anyone out there....
>>
>> In particular, it allows use cases that are not possible right now (e.g.
>> reasonable postMessage from an about:blank page to a page that has the same
>> origin as the about:blank page).
>>     
>
> Yeah, it seems like there's a big difference between breaking changes
> (e.g., rejecting previously valid inputs) and non-breaking changes
> (e.g., allowing some new, previously invalid inputs).
>
>   

Opera has reverted targetOrigin validation back to previous in current 
builds, but we also wouldn't mind keeping "/".

--sigbjorn; sof at opera.com




More information about the whatwg mailing list