`file:` URLs are only mostly opaque in `SecurityOrigin` and `url::Origin`. We need to make some hard decisions about how to align the two. I have opinions.
From an internal thread:
"""
https://crbug.com/793074 popped up today, and it's the last straw in a string of `file:`-related bugs ( https://crbug.com/788936 , for example). I want to stop having these bugs by breaking whatever's left of `file:`'s capability by finishing the job of making them opaque origins (unless whatever flag controls `block_local_access_from_local_origin_` is also set (also, also we should kill that flag)).
Browsers already diverge significantly with regard to their behavior for `file:` URLs (see https://github.com/whatwg/html/issues/3099). I'm basically suggesting that we adopt something more like Safari's behavior than what we're doing today.
"""
Comment 1 by dcheng@chromium.org
, Dec 12 2017