[whatwg] Need to define same-origin policy for WebIDL operations/getters/setters

[Ian Hickson]

On Wed, 9 Jan 2013, Adam Barth wrote:
> On Wed, Jan 9, 2013 at 1:28 PM, Ian Hickson <ian at hixie.ch> wrote:
> > On Wed, 9 Jan 2013, Adam Barth wrote:
> >> The Document interface (which is what we started this thread 
> >> discussing) is never visible across origins and so does not have any 
> >> of these complexities.
> >
> > Actually Document objects can be visible across origins per spec, but 
> > none of their properties ever are.
> 
> For what it's worth, that doesn't appear to be necessary for web 
> compatibility.  Any time WebKit would return a Document to a script in 
> another origin, WebKit returns null instead.

That's interesting. Would other browser vendors be willing to do that? I'm 
certainly eager to make it null if we can get away with it. Would reduce 
the number of objects that need magic from 4 to 3.

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'