document.suborigin or something should allow JS to detect if in suborigin

[devd]

No description provided.

[annevk]

Note that apart from document.origin, we also have self.origin these days. They are subtly different in edge cases.

[devd]

ohh .. didn't know that. do you have a link explaining this?

On 9 May 2016 at 10:23, Anne van Kesteren [email protected] wrote:

Note that apart from document.origin, we also have self.origin these days.
They are subtly different in edge cases.

—
You are receiving this because you authored the thread.
Reply to this email directly or view it on GitHub
#35 (comment)

[annevk]

whatwg/html#951 (comment) is the best I have thus far.

[devd]

@jeisinger thoughts on this?

[jeisinger]

I'd propose to go with self.suborigin to mirror self.origin. As @annevk pointed out, document.origin is deprecated

[devd]

We could also go with self.origin returning the ExtendedOrigin object similar to what we did in postMessage. That seems cleaner IMO.

[annevk]

That kind of generalization would work better for Origin Isolation too (I think we'd want to expose that to JavaScript, though I don't think we want to change postMessage() for it).