Bug 240016

Summary:	BroadcastChannel instance in data URL dedicated worker can communicate with creator context
Product:	WebKit	Reporter:	Andrew Williams <awillia>
Component:	New Bugs	Assignee:	Chris Dumez <cdumez>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	achristensen, cdumez, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	Safari Technology Preview
Hardware:	Unspecified
OS:	Unspecified

Description Andrew Williams 2022-05-03 09:14:13 PDT

I wrote a test to determine whether a BroadcastChannel instance inside of a data URL dedicated worker can communicate with an instance in the site that created it, and it looks like it can in Safari Tech Preview 144:

https://wpt.fyi/results/webmessaging/broadcastchannel/opaque-origin.html?label=experimental&label=master&aligned

A data URL worker should have a unique opaque origin and shouldn't be able to communicate with a BroadcastChannel instance in the creator document, per the HTML standard.

Comment 1 Chris Dumez 2022-05-03 15:43:12 PDT

Pull request: https://github.com/WebKit/WebKit/pull/484

Comment 2 EWS 2022-05-05 09:35:17 PDT

Committed r293841 (250314@main): <https://commits.webkit.org/250314@main>

Reviewed commits have been landed. Closing PR #484 and removing active labels.

Comment 3 Radar WebKit Bug Importer 2022-05-05 09:36:13 PDT

<rdar://problem/92801721>