Urgh. This also ties into bug 1228118 and bug 1767001. Perhaps aligning subsumption/equality for about: URLs more closely with the spec would help here? I agree that `about:blank` and `about:srcdoc` shouldn't be treated as equal but in theory documents with those URLs shouldn't actually end up with those origins in their principals, but with the origin of the thing that created them (or a null principal). In fact, I wonder how much would break if we just broke creating codebase principals for those specific URLs...
Bug 1802511 Comment 7 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
Urgh. This also ties into bug 1228118 and bug 1767001. Perhaps aligning subsumption/equality for about: URLs more closely with the spec would help here? I agree that `about:blank` and `about:srcdoc` shouldn't be treated as equal but in theory documents with those URLs shouldn't actually end up with those origins in their principals, but with the origin of the thing that created them (or a null principal). In fact, I wonder how much would break if we just broke creating codebase principals for those specific URLs... (or made it devolve to "create a null principal").