23989 2013-12-03 18:52:11 +0000 Fix broken "Origin of Blob URIs" link to File API spec 2013-12-10 16:44:36 +0000 1 1 1 Unclassified HTML WG Media Source Extensions unspecified PC Linux RESOLVED FIXED P2 normal LC 1 acolwell adrianba ddorwin mike public-html-media public-html-bugzilla oldest_to_newest 97070 0 acolwell 2013-12-03 18:52:11 +0000 The latest update to the File API removed the "Origin of Blob URIs" section that MSE's "MediaSource Object URL" section was referencing. This means that the MediaSource object no longer has a clear definition for its origin. The following is the text that was removed from the File API spec. "The origin of a Blob URI must be the origin of the script that called URL.createObjectURL. Blob URIs must only be valid within this origin." We need similar text in the MSE spec or a new reference to a section in the File API spec that clarifies the origin for Blob URIs. 97398 1 adrianba 2013-12-10 15:46:51 +0000 The text was removed based on this conversation: http://lists.w3.org/Archives/Public/public-webapps/2013JanMar/0994.html 97400 2 adrianba 2013-12-10 16:00:10 +0000 I'm not sure we should consider media source object URLs same-origin so I propose that we start conservatively until we can prove that is safe. To do this I propose that we import the definition we've been using from the old File API draft. Proposed text: "The origin of the MediaSource object URL is the effective script origin of document that called URL.createObjectURL." [effective script origin] = http://www.w3.org/TR/html5/browsers.html#effective-script-origin 97405 3 acolwell 2013-12-10 16:44:36 +0000 Change committed. https://dvcs.w3.org/hg/html-media/rev/d8ad50e85da3