Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expose getRandomValues/randomUUID in ShadowRealms #44137

Open
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

Ms2ger
Copy link
Contributor

@Ms2ger Ms2ger commented Jan 23, 2024

@ptomato
Copy link
Contributor

ptomato commented Jan 16, 2025

Updated to reflect my current understanding that crypto.subtle should be exposed everywhere according to https://www.w3.org/TR/design-principles/#expose-everywhere.

(Apologies for the noise, the infra / serve addition was because I accidentally pushed an unintended change. I've removed that now.)

ShadowRealm scopes, even when created in a secure context, should not be
able to access crypto.subtle, SubtleCrypto, or CryptoKey, because those
are not [Exposed=*].
@ptomato ptomato force-pushed the sr-getRandomValues branch from 2ad26c6 to 61f075a Compare January 17, 2025 18:28
@ptomato
Copy link
Contributor

ptomato commented Jan 17, 2025

Updated again after discussion in w3c/webcrypto#361.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants