Open
Bug 1630868
Opened 5 years ago
Updated 3 years ago
[meta] Audit GetBaseDomain (eTLD+1) usage
Categories
(Core :: DOM: Security, task, P3)
Core
DOM: Security
Tracking
()
NEW
People
(Reporter: annevk, Unassigned)
References
(Depends on 3 open bugs)
Details
(Keywords: meta, Whiteboard: [domsecurity-meta])
GetBaseDomain (eTLD+1) is a bad primitive as it completely ignores the scheme of the URL. We should have something akin to GetSite https://html.spec.whatwg.org/#obtain-a-site and use that instead.
Note that when imposing restrictions or removing things, eTLD+1 is likely still the way to go.
(Of course, if any usage can be replaced by an origin/principal that would be even better.)
|
||
Updated•5 years ago
|
Summary: Audit GetBaseDomain (eTLD+1) usage → [meta] Audit GetBaseDomain (eTLD+1) usage
|
||
Updated•5 years ago
|
Priority: -- → P3
Whiteboard: [domsecurity-meta]
You need to log in
before you can comment on or make changes to this bug.
Description
•