On Tue, Jun 30, 2015 at 3:55 PM, Martin Thomson <m...@mozilla.com> wrote: > I wonder, has the subject of double-keying been raised in this > context? It comes up frequently in this context. And when I say > double-keying, I mean forming a key from the tuple of the requesting > principal and the top level browsing context principal (though origin > may suffice). > > If there are disruptive changes afoot, then segregating based on what > is shown to the user might be sensible.
Bobby Holley has added infrastructure on nsIPrincipal called "OriginAttributes" which is intended to be an extension hook to allow things like double keying. As long as we use the 'origin' attribute on nsIPrincipal, and make sure that all callers pass in an nsIPrincipal rather than an nsIURI, then we should be able to relatively easy add double keying in the future. / Jonas _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
