gecko-dev/docshell
Yoshi Huang 94d1d69dc1 Bug 1373513 - Part 1: data:image, data:css, and data:fonts should be same origin. r=smaug
For font-face
https://drafts.csswg.org/css-fonts-3/#font-fetching-requirements

/* data url's with no redirects are treated as same origin */
src: url("data:application/font-woff;base64,...");

For image
https://html.spec.whatwg.org/multipage/images.html#updating-the-image-data
Step 12
 Fetch request. Let this instance of the fetching algorithm be
associated with image request.

This will go to Fetch spec then.

For <link rel="stylesheet" href="data:text/css" ...>
https://html.spec.whatwg.org/multipage/semantics.html#obtaining-a-resource-from-a-link-element
Step 10
Fetch request.

This will also go to Fetch spec then.

[Fetch] specification,
https://fetch.spec.whatwg.org/#main-fetch, step 12,
request’s current url’s scheme is "data"
1. Set request’s response tainting to "basic".

And from
https://html.spec.whatwg.org/multipage/urls-and-fetching.html#terminology-3
A response whose type is "basic", "cors", or "default" is
CORS-same-origin.

For subresource loading using data: URI, it should be treated as same
origin.
2017-07-12 11:00:13 +08:00
..
base Bug 1373513 - Part 1: data:image, data:css, and data:fonts should be same origin. r=smaug 2017-07-12 11:00:13 +08:00
build Bug 1363327 - register about:debugging dynamically using a manifest;r=ochameau 2017-05-26 10:09:42 +02:00
resources/content Bug 1334831 - script-generated patch to use .remove() instead of .parentNode.removeChild, r=jaws. 2017-01-30 08:10:22 +01:00
shistory Bug 1372405 - Provide names for all runnables in the tree (r=froydnj) 2017-06-26 14:19:58 -07:00
test Bug 1377492 - fix mochitest-1 failure in docshell when data: URI is a unique origin. r=smaug 2017-07-12 10:35:54 +08:00
moz.build Bug 1350496 - add BUG_COMPONENT to docshell/* files. r=overholt 2017-04-09 05:43:52 -04:00