Skip to content

Commit 09c2fb2

Browse files
committed
SECURE: Note the Shared Worker issue.
1 parent 61bd6d5 commit 09c2fb2

File tree

2 files changed

+16
-1
lines changed

2 files changed

+16
-1
lines changed

specs/powerfulfeatures/index.html

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -96,7 +96,7 @@
9696
<h1 class="p-name no-ref" id="title">Secure Contexts</h1>
9797

9898
<h2 class="no-num no-toc no-ref heading settled" id="subtitle"><span class="content">Editor’s Draft,
99-
<time class="dt-updated" datetime="2015-09-11">11 September 2015</time></span></h2>
99+
<time class="dt-updated" datetime="2015-09-14">14 September 2015</time></span></h2>
100100

101101
<div data-fill-with="spec-metadata">
102102
<dl>
@@ -625,6 +625,12 @@ <h4 class="heading settled" data-level="1.1.4" id="examples-shared-workers"><spa
625625
<p>Shared Workers are similar to dedicated Workers, but need to check through
626626
each of the documents which share them:</p>
627627

628+
629+
<p class="issue" id="issue-c5802c14"><a class="self-link" href="#issue-c5802c14"></a> The current handling of Shared Workers means that
630+
the worker’s state will oscillate between secure and insecure based on the
631+
documents that attach to it. That will likely confuse developers. Several
632+
options for improvements have been suggested in the associated bug. <a href="https://github.com/w3c/webappsec/issues/406">&lt;https://github.com/w3c/webappsec/issues/406></a></p>
633+
628634

629635
<div class="example" id="example-7e3c52b5"><a class="self-link" href="#example-7e3c52b5"></a>
630636

@@ -1861,6 +1867,10 @@ <h2 class="no-num heading settled" id="idl-index"><span class="content">IDL Inde
18611867
</pre>
18621868
<h2 class="no-num heading settled" id="issues-index"><span class="content">Issues Index</span><a class="self-link" href="#issues-index"></a></h2>
18631869
<div style="counter-reset:issue">
1870+
<div class="issue"> The current handling of Shared Workers means that
1871+
the worker’s state will oscillate between secure and insecure based on the
1872+
documents that attach to it. That will likely confuse developers. Several
1873+
options for improvements have been suggested in the associated bug. <a href="https://github.com/w3c/webappsec/issues/406">&lt;https://github.com/w3c/webappsec/issues/406></a><a href="#issue-c5802c14"></a></div>
18641874
<div class="issue"> WHATWG’s HTML for <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#creation-url">creation URL</a>, as W3C’s doesn’t
18651875
define the primitive we need.<a href="#issue-091ab16c"></a></div>
18661876
<div class="issue"> <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response-https-state">HTTPS state</a> is poorly defined. For example, we should ensure

specs/powerfulfeatures/index.src.html

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -291,6 +291,11 @@ <h4 id="examples-shared-workers">Shared Workers</h4>
291291
Shared Workers are similar to dedicated Workers, but need to check through
292292
each of the documents which share them:
293293

294+
ISSUE(w3c/webappsec#406): The current handling of Shared Workers means that
295+
the worker's state will oscillate between secure and insecure based on the
296+
documents that attach to it. That will likely confuse developers. Several
297+
options for improvements have been suggested in the associated bug.
298+
294299
<div class="example">
295300
<p>If <code>https://example.com/</code> in a <a>top-level browsing
296301
context</a> runs <code>https://example.com/worker.js</code> as a Shared

0 commit comments

Comments
 (0)