Bug 240016 - BroadcastChannel instance in data URL dedicated worker can communicate with creator context
Summary: BroadcastChannel instance in data URL dedicated worker can communicate with c...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: Safari Technology Preview
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Chris Dumez
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2022-05-03 09:14 PDT by Andrew Williams
Modified: 2022-05-05 09:36 PDT (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andrew Williams 2022-05-03 09:14:13 PDT 
I wrote a test to determine whether a BroadcastChannel instance inside of a data URL dedicated worker can communicate with an instance in the site that created it, and it looks like it can in Safari Tech Preview 144:

https://wpt.fyi/results/webmessaging/broadcastchannel/opaque-origin.html?label=experimental&label=master&aligned

A data URL worker should have a unique opaque origin and shouldn't be able to communicate with a BroadcastChannel instance in the creator document, per the HTML standard.
Comment 1 Chris Dumez 2022-05-03 15:43:12 PDT 
Pull request: https://github.com/WebKit/WebKit/pull/484
Comment 2 EWS 2022-05-05 09:35:17 PDT 
Committed r293841 (250314@main): <https://commits.webkit.org/250314@main>

Reviewed commits have been landed. Closing PR #484 and removing active labels.
Comment 3 Radar WebKit Bug Importer 2022-05-05 09:36:13 PDT 
<rdar://problem/92801721>