Re: CSP and object URLs

2011-07-26 Thread Daniel Veditz
On 7/22/11 7:18 PM, Eli Grey wrote: CSP needs a way to support object URLs, of which the scheme is implementation specific (e.g. moz-filedata:{GUID} in Firefox, blob:{origin}{GUID} in WebKit). How might this be accomplished? This is a better conversation for public-web-secur...@w3.org where

Re: CSP and object URLs

2011-07-26 Thread Adam Barth
On Tue, Jul 26, 2011 at 5:19 PM, Daniel Veditz dved...@mozilla.com wrote: On 7/22/11 7:18 PM, Eli Grey wrote: CSP needs a way to support object URLs, of which the scheme is implementation specific (e.g. moz-filedata:{GUID} in Firefox, blob:{origin}{GUID} in WebKit). How might this be