[whatwg] Same origin - Blob and FileSystem URLs

Bronislav Klučka Bronislav.Klucka at bauglir.com
Wed Oct 12 07:39:30 PDT 2011

On 12.10.2011 16:32, Kyle Huey wrote:
> 2011/10/12 Bronislav Klučka<Bronislav.Klucka at bauglir.com>
>> Hello
>> Certain parts of spesc are covering how to work with resources identified
>> by URL and same-origin issue (download attribute, canvas)
>> looking at same-origin algorithm
>> http://www.whatwg.org/specs/**web-apps/current-work/**
>> multipage/origin-0.html#same-**origin<http://www.whatwg.org/specs/web-apps/current-work/multipage/origin-0.html#same-origin>
>> I'm wondering about Blob URL and FileSystem API URL. Those are not
>> conventional URL but they are named as "URL" and one can work with them the
>> same as with regular URL. How does the same-origin policy apply to those
>> URLs?
>> Bronislav Klucka
> Per spec, Blob URIs are same origin with the script that created them.  See
> http://dev.w3.org/2006/webapi/FileAPI/#originOfBlob
> - Kyle

May I assume that
is also the same-origin as the originator script origin?


More information about the whatwg mailing list