4 ms·
> The question I'm asking myself now is how to fix this. Doesn't the website answer that? Just follow the spec! Firefox isn't vulnerable…
by espadrine 14y ago
> The question I'm asking myself now is how to fix this.
Doesn't the website answer that? Just follow the spec!
Firefox isn't vulnerable…
- pilif 14y agoIf you do that (like Firefox admittedly does), then my issue with subdomain users using up all local storage comes into place. It would really suck for github (for example) not to be able to use local storage in their UI because pilif.github.com used up all available storage for the whole domain.
- emn13 14y agoThis sounds like a mostly theoretical problem. Sure, it could be annoying, but if the quota simple is a little smarter (e.g. allowing a few filled subdomains rather than just 1, and/or always allowing the root subdomain to fill up, and/or evicting subdomains from localstorage on an LRU basis) then the chances of this happening non-maliciously are very small - and when push comes to shove, there's no guarrantee localStorage will persist anyhow, so every site needs to be robust in the face of data loss anyhow.