Open Bug 825057 Opened 13 years ago Updated 4 years ago

A data: worker used inside a data: URL doesn't seem to work

Categories

(Core :: DOM: Core & HTML, defect, P5)

Product:
Core
Component:
DOM: Core & HTML
Type:
defect

Tracking

()

People

(Reporter: Waldo, Unassigned)

References

(
URL
)

Details

See URL. http://software.hixie.ch/utilities/js/live-dom-viewer/saved/2050 has an editable version of the same. Note that the Rendered view bit shows this as PASS, but if you copy that link's URL into a new tab, you don't get PASS. I didn't investigate, myself, but bent sez this is because http://mxr.mozilla.org/mozilla-central/source/content/base/src/ThirdPartyUtil.cpp#258 is faily in this situation, so I'm filing this as DOM-general based on that being not worker-specific.
This comment (from the MXR link in comment 0) seems relevant... > 277 // Reject any URIs without a host that aren't file:// URIs.
Seems probable, yeah.
I suspect the real solution is for workers to stop using ThirdPartyUtil here. It's doing that because it's trying to convert URIs (or principals, I'm not sure) into strings just so that they can be referenced from the worker thread. We really should stop using string handling so much in workers and instead use real uri and principal objects, but just make sure to do security checks on the main thread so that it's safe to use those objects.
It's doing this so that it can figure out if the domain has too many workers already.
Hmm.. ok.. Maybe we should change the signature of this comment such that it takes a principal and uses its base-domain if the passed in URI is one that inherits principals.
https://bugzilla.mozilla.org/show_bug.cgi?id=1472046 Move all DOM bugs that haven’t been updated in more than 3 years and has no one currently assigned to P5. If you have questions, please contact :mdaly.
Priority: -- → P5
Component: DOM → DOM: Core & HTML
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.