Open jonathanKingston opened 11 months ago
Naively, I would think that if we're keying on top-level origin (A), frame origin (B) and link URL (C/foobar), we could add 2 entries to the cache for each link click: (A, B, C/foobar) and (C, C, C/foobar)
That way, same-origin links would Just Work™ (without exposing any extra information to origin C, as it can already store that information relative to the user's credentials).
Thanks for the session at TPAC yesterday, we discussed this in the meeting but I wanted to highlight the discussion here a little.
In the triple keying approach outlined in the explainer, same origin links wouldn't be considered visited if they came from a different origin.
The example was something like:
In the above case the link wouldn't be considered visited.
If we wish to support this case, we should be careful to: