1259873 - Find a way to pass window and security information to LoadInfo from dedicated web workers

Status: RESOLVED WORKSFORME

(Core :: DOM: Workers, defect, P5)

Description

[Blake Kaplan (:mrbkap) (inactive)]

In bug 1257861, I switched the default LoadInfo behavior to assume that things are not 3rd party until proven otherwise. Unfortunately, dedicated web workers fall into this category. We should fix that by passing the parent document for it and other information (sicking has more info) through to LoadInfo somehow.

Comment 1

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Kyle, this is the worker-related thing that I've been talking about.

What we need is an object (a separate one for every worker) which contain "network related stuff" related to the given worker. This object would as a start contain:

* Principal
* LoadGroup
* Private-browsing
* Owning document (this is null for shared/service workers as well as their dedicated sub-workers)

It's important that this object can be used from the main thread. I.e. can be addreffed/released, and where the above members can be accessed. Probably fine if other members can't be used from main thread, as long as we have assertions in place if they are.

I don't think the object needs to be scriptable.


The goal here is to be able to pass this object to NS_NewChannel, so that we can deduce things like referrer, third-party-ness, originattributes, CSP, mixed-content-blocking etc.

Comment 2

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Oh, and the object likely needs to be refcounted so that we can rely on it being alive for the lifetime of the channel.

Comment 3

[Jens Stutte [:jstutte]]

Please check if this is still an issue.

Comment 4

[Andrew Sutherland [:asuth] (he/him)]

Everything from comment 1 is now propagated as well as other things like CookieJarSettings.