w3c / webappsec-suborigins

Suborigins
https://w3c.github.io/webappsec-suborigins/
Other
25 stars 9 forks source link

Integration with the Storage Standard #78

Open annevk opened 6 years ago

annevk commented 6 years ago

Obtaining the permission should use the "physical origin", but what gets persistent is only the suborigin. That does mean that once the user grants it for one suborigin, all suborigins of that "physical origin" can invoke persist() to get their data persisted if desired.

This will also require some refactoring of how boxes work.

(Again, Origin Isolation would not be affected here.)