Closed Bug 1169621 Opened 11 years ago Closed 8 years ago

Cross-origin Service Workers

Categories

(Core :: DOM: Service Workers, defect, P5)

Product:
Core
Component:
DOM: Service Workers
Type:
defect

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: benfrancis, Unassigned)

Details

(Keywords: feature)

User Story

As a developer I'd like to register a Service Worker which can respond to XHR/fetch requests made from other origins to my origin.
As a developer I'd like to register a Service Worker which can respond to XHR/fetch requests made from other origins to my origin. We have many potential use cases for this in Gaia for creating REST style web services which can work even while offline, potentially replacing many of the proprietary APIs we currently use in B2G. Something along these lines is being discussed for the Service Worker specification https://github.com/slightlyoff/ServiceWorker/issues/684 and previously in relation to navigator.connect https://github.com/mkruisselbrink/navigator-connect/issues/23 See also: dev-webapi thread https://groups.google.com/forum/#!msg/mozilla.dev.webapi/2NWlXa9SlqY/mQ0zBI1SChUJ
When speccing this out we should make sure we do not cause a problem similar to CSRF, where a hostile website can coerce a Cross-Origin ServiceWorker to do something the user did not intend it to do. I'm happy to provide some feedback along the process.
Status: NEW → RESOLVED
Closed: 8 years ago
Priority: -- → P5
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.