Re: Necko e10s specs

On Wed, Sep 9, 2009 at 1:57 AM, Chris Jones<[email protected]> wrote:
> And if someone can think of a situation *not* involving plugins (the current
> spec handles that case) where script in one domain could synchronously
> invoke script in another, he/she should file a bug *now*.  From what I
> understand this is a potentially major security hole, in addition to a
> bother for storage mutex implementors.

Can one domain trigger a navigation/document.write/clear/etc. cause an
onbeforeunload in a document on another domain to fire synchronously?
Writing to storage from onbeforeunload doesn't seem that far-fetched.

Mike