only allow postMessage() of WebAssembly.Module between dedicated workers

REOPENED
Assigned to

Status

()

P3
normal
REOPENED
2 years ago
4 months ago

People

(Reporter: luke, Assigned: baku)

Tracking

(Blocks: 1 bug, {dev-doc-needed})

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

2 years ago
This bug is for restricting postMessage() of a WebAssembly.Module to only work between dedicate workers in the same origin.  The reasoning given by the blink folks is that, when it comes to cross-origin sharing/caching of code, other proposals like SW+foreign-fetch (or just relying on the HTTP cache) are safer because they don't involve setting window.onmessage.
Luke, are you planning to work on this?
Flags: needinfo?(luke)
Priority: -- → P3
(Reporter)

Comment 2

2 years ago
baku said it was an easy change so I hoping that he perhaps could?
Flags: needinfo?(luke)
Flags: needinfo?(amarchesini)
(Assignee)

Comment 3

2 years ago
Luke, do we want to support window-to-DedicatedWorker and DedicateWorker-to-window communication?
Assignee: nobody → amarchesini
Flags: needinfo?(amarchesini) → needinfo?(luke)
(Reporter)

Comment 4

2 years ago
Oops, yes.
Flags: needinfo?(luke)

Comment 5

4 months ago
Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.
Status: NEW → RESOLVED
Last Resolved: 4 months ago
Resolution: --- → INACTIVE
Status: RESOLVED → REOPENED
Resolution: INACTIVE → ---
Keywords: dev-doc-needed
You need to log in before you can comment on or make changes to this bug.