1603531 - Figure out what rules should be applied for a site specific browser loading data/blob urls.as toplevel documents

Status: RESOLVED WONTFIX

(Firefox :: General, task, P3)

Description

[Dave Townsend [:mossop]]

Currently these types of loads are blocked but they might be needed by some sites. The spec doesn't really say whether they are in scope or not.

Comment 1

[per]

data: URLs are needed by DomTerm. For example domterm hcatof an image works by converting the image to base64 and sending a data URL.

DomTerm could perhaps work around the lack of data URLs but it would be a major pain.

Comment 2

[:Gijs (he/him)]

(In reply to per from comment #1)

data: URLs are needed by DomTerm. For example domterm hcatof an image works by converting the image to base64 and sending a data URL.

DomTerm could perhaps work around the lack of data URLs but it would be a major pain.

Does it load these data URLs as a toplevel URL?

Comment 3

[per]

"Does it load these data URLs as a toplevel URL?"

No, I can't see any need for that. It would be mainly for images.

Comment 4

[:Gijs (he/him)]

(In reply to per from comment #3)

Does it load these data URLs as a toplevel URL?

No, I can't see any need for that. It would be mainly for images.

Then you're fine irrespective of our decision here. We're not disabling all of data: URLs; this is only about whether they and blob URLs can be loaded as toplevel documents inside the site-specific browser. You could imagine, say, a link in example.com that points to data:text/html,<a href="https://example.com/">Back</a> [more content here], and in theory that might "work", if we allowed it. It's not clear whether we should.

Comment 5

[per]

Thanks. I see you changed the title to make that clear.

(DomTerm catches clicking on links anyway, redirecting them to a regular browser window/tab.)

Comment 6

[Release mgmt bot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug should belong to this component, but please revert this change in case of error.

Comment 8

[Dave Townsend [:mossop]]

Closing per bug 1682593.