[whatwg] Same origin - Blob and FileSystem URLs

Kyle Huey me at kylehuey.com
Wed Oct 12 07:32:56 PDT 2011


2011/10/12 Bronislav Klučka <Bronislav.Klucka at bauglir.com>

> Hello
> Certain parts of spesc are covering how to work with resources identified
> by URL and same-origin issue (download attribute, canvas)
> looking at same-origin algorithm
> http://www.whatwg.org/specs/**web-apps/current-work/**
> multipage/origin-0.html#same-**origin<http://www.whatwg.org/specs/web-apps/current-work/multipage/origin-0.html#same-origin>
> I'm wondering about Blob URL and FileSystem API URL. Those are not
> conventional URL but they are named as "URL" and one can work with them the
> same as with regular URL. How does the same-origin policy apply to those
> URLs?
>
> Bronislav Klucka
>
>
Per spec, Blob URIs are same origin with the script that created them.  See
http://dev.w3.org/2006/webapi/FileAPI/#originOfBlob

- Kyle



More information about the whatwg mailing list