Skip to content

Share Script Threads by eTLD+1, not by parent origin #633

@jdm

Description

@jdm

This will allow separate tabs to execute independently, which is good. This will also allow us to sidestep problems where an iframe changes document.domain to either become cross-origin or same-origin but is part of the parent's TLD (eg. images.yahoo.com and yahoo.com). Any iframe that's part of the parent's TLD should use the parent's script task, and any that is not should get its own.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions