-
-
Notifications
You must be signed in to change notification settings - Fork 3.6k
Share Script Threads by eTLD+1, not by parent origin #633
Copy link
Copy link
Labels
A-content/scriptRelated to the script threadRelated to the script thread
Description
This will allow separate tabs to execute independently, which is good. This will also allow us to sidestep problems where an iframe changes document.domain to either become cross-origin or same-origin but is part of the parent's TLD (eg. images.yahoo.com and yahoo.com). Any iframe that's part of the parent's TLD should use the parent's script task, and any that is not should get its own.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
A-content/scriptRelated to the script threadRelated to the script thread