canmove, Confirmed users
637
edits
Firefox3.1/XHR Progress Events Security Review: Difference between revisions
Jump to navigation
Jump to search
Firefox3.1/XHR Progress Events Security Review (view source)
Revision as of 19:29, 7 October 2008
, 7 October 2008→Review comments
| Line 31: | Line 31: | ||
== Review comments == | == Review comments == | ||
* In the cross-site case with uploadprogress events page content can use them to tell if a given server exists (presumably, one inside a firewall). | |||
* what if windowA scripts starts an XHR in windowB (same-origin)? which gets the events? what happens if one or both navigate while the events are coming in? | |||
* These events are available to worker threads, for XHR created by that worker. | |||