New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 608606 link

Starred by 6 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 2
Type: Bug



Sign in to add a comment

A URL object's origin property should return "null" when its scheme is "file" or other unlisted schemes

Reported by l446240525@gmail.com, May 3 2016

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2715.0 Safari/537.36

Steps to reproduce the problem:
1. see URL spec 4.5 https://url.spec.whatwg.org/#origin:

> "file"
>  Unfortunate as it is, this is left as an exercise to the reader. When in doubt, return a new opaque origin.
>
> Otherwise
> Return a new opaque origin.

2. then see HTML spec 7.5 https://html.spec.whatwg.org/multipage/browsers.html#unicode-serialisation-of-an-origin

> 1. If origin is an opaque origin, then return "null".

What is the expected behavior?

What went wrong?
see attachments

Did this work before? N/A 

Chrome version: 52.0.2715.0  Channel: n/a
OS Version: OS X 10.10.4
Flash Version: Shockwave Flash 21.0 r0
 
Screen Shot 2016-05-03 at 11.49.49 AM.png
41.3 KB View Download
Screen Shot 2016-05-03 at 11.49.36 AM.png
53.7 KB View Download
Components: Blink
Labels: M-52 OS-Linux OS-Windows
Status: Untriaged (was: Unconfirmed)
This behavior is same from M 33.0.1701.0 and prior to it displayed undefined.
So marking this as a non regression issue and untriaged.
Components: -Blink Blink>DOM Blink>Loader
Components: -Blink>Loader

Comment 5 by tkent@chromium.org, May 13 2016

Components: -Blink>DOM Blink>Network
Project Member

Comment 6 by sheriffbot@chromium.org, Jun 1 2016

Labels: -M-52 M-53 MovedFrom-52
Moving this nonessential bug to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 7 by sheriffbot@chromium.org, Jul 11 2016

Labels: -M-53 MovedFrom-53
This issue has been moved once and is lower than Pri-1. Removing the milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Cc: mkwst@chromium.org
Components: Blink>SecurityFeature
Labels: -OS-Linux -OS-Windows -OS-Mac OS-All
It's returning SecurityOrigin::toString().

For "file", it returns "null" only when m_blockLocalAccessFromLocalOrigin is true. It's false by default.

For others not listed there, shouldTreatAsUniqueOrigin() could be fixed to create a SecurityOrigin representing the unique origin, but needs to be careful not to regress extensions.
Status: Available (was: Untriaged)

Comment 11 by ajha@chromium.org, May 16 2017

 Issue 722089  has been merged into this issue.
Labels: Hotlist-EnamelAndFriendsFixIt
Labels: -Hotlist-EnamelAndFriendsFixIt

Sign in to add a comment