The behavior of documents loaded from `file:` URLs is somewhat strange across browsers. Perhaps it's worth aligning?https://github.com/whatwg/html/issues/3099 …
The subdirectory thing is also bad. Browsers should at least save a CSP that restricts page to loading own subresources when saving a page.
-
-
Loading the subresources is one thing, treating them as same-origin (and therefore readable) is another. I'd prefer folks stop doing that.
-
Wouldn't injecting the CSP solve that too?
-
Injecting a policy would prevent the page from loading the resource in the first place, sure.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.