-
Notifications
You must be signed in to change notification settings - Fork 3.1k
Open
Labels
addition/proposalNew features or enhancementsNew features or enhancementsneeds implementer interestMoving the issue forward requires implementers to express interestMoving the issue forward requires implementers to express interesttopic: origin
Description
What problem are you trying to solve?
Origins are the fundamental currency of the web's security model, and we work with them in a variety of APIs. However, we do so only as serialized strings: this can complicate comparisons, leading to security problems.
What solutions exist today?
Direct comparisons of serialized origins are straightforward. A variety of libraries exist that aim to enable more complicated comparisons; it's certainly possible to do so correctly in userland, if non-trivial.
How would you solve it?
https://mikewest.github.io/origin-api/ sketches an Origin object, with some additional examples and potential extensions in an explainer.
Anything else?
No response
sideshowbarker and flano-yuki
Metadata
Metadata
Assignees
Labels
addition/proposalNew features or enhancementsNew features or enhancementsneeds implementer interestMoving the issue forward requires implementers to express interestMoving the issue forward requires implementers to express interesttopic: origin