1574000 - Obtaining COOP only works over a secure context

Status: RESOLVED FIXED

(Core :: DOM: Networking, defect, P2)

Description

[Junior [inactive]]

The bug is for semi-formal spec change here
https://gist.github.com/annevk/6f2dd8c79c77123f39797f6bdac43f3e

Please see
https://w3c.github.io/webappsec-secure-contexts/#is-settings-object-contextually-secure

Since we only consider Cross-Origin-Opener-Policy for toplevel document loads, no need to worry about neither sandbox nor parent browsing context.

Hence, the following item is the only thing we need to check

3.1.5.5 document’s active sandboxing flag set does not include the sandboxed origin browsing context flag, and §3.2 Is origin potentially trustworthy? returns "Not Trustworthy" when executed upon settings’s origin.

Comment 1

[Junior [inactive]]

Attachment: Bug 1574000 - Obtain COOP only over a secure context

Comment 2

[Neha Kochar [:neha]]

Nhi, please find a new assignee for this while Junior is out.

Comment 3

[Nhi Nguyen (:nhi)]

Junior will resume this work as discussed.

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/9c5d1947a72e
Obtain COOP only over a secure context r=nika,bzbarsky

Comment 5

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/9c5d1947a72e