Bug 1836428 [wpt PR 40356] - Prerender: Allow prerendering pages to create blob URL...
commit648a709b6aec8461d5b4a95104c957aa711ac4fb
authorLingqi Chi <lingqi@chromium.org>
Sun, 11 Jun 2023 18:55:29 +0000 (11 18:55 +0000)
committermoz-wptsync-bot <wptsync@mozilla.com>
Tue, 13 Jun 2023 07:15:29 +0000 (13 07:15 +0000)
treec4c9f31d36479ea915f4f9febcf7edb38d04085b
parent2fe2528b8d4e5d902aab955d7ee2e34653a043ed
Bug 1836428 [wpt PR 40356] - Prerender: Allow prerendering pages to create blob URL, a=testonly

Automatic update from web-platform-tests
Prerender: Allow prerendering pages to create blob URL

Previously, prerendering pages cannot create blob URLs, as this API
uses a sync IPC to communicate, and we would cancel prerendering by
default in this case to ensure prerendering is safe.
After auditing it (see reasoning), we think creating an object URL seems
safe, and we can grant it during prerendering.

Reasoning:
- The blob url should be same-origin as the prerendering origin, so we
  do not touch other origins.
- The security concerns should be addressed by this API.
  https://w3c.github.io/FileAPI/#security-discussion

Bug: 1406125
Change-Id: I3c94e45fe59adb7227a71a702a4793ee8281b395
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4583910
Commit-Queue: Lingqi Chi <lingqi@chromium.org>
Reviewed-by: Takashi Toyoshima <toyoshim@chromium.org>
Reviewed-by: Hiroki Nakagawa <nhiroki@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1152423}

--

wpt-commits: 7c5c26cd2e07db55479aff6f5b71e4319c1a9860
wpt-pr: 40356
testing/web-platform/tests/speculation-rules/prerender/blob_object_url.html [new file with mode: 0644]