ldm0 e1e3104092 fix(file-api): authorize blob URL revocation by storage key ...

Record the URL creator's storage key and browser partition independently of
its backing Blob, and check authorization atomically with URL removal.
Use the Worker's environment key and share opaque-origin nonce allocation
between Windows and Workers so unrelated opaque origins cannot collide.

Validated with cargo fmt, workspace clippy, and nextest (17990 passed,
13 skipped). Cross-global revoke WPT passes 3/3; all 874 contract checks pass,
with no regressions across the 68-case WPT suite.

2026-09-27 06:43:22 +08:00

..

src

fix(file-api): authorize blob URL revocation by storage key

2026-09-27 06:43:22 +08:00

Cargo.toml

Public preview

2026-08-11 00:10:12 +08:00