Review Mozilla 1085214: Implement Location.ancestorOrigins
🔍 Bugzilla Audit
Bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1085214
Description
Adds Location.ancestorOrigins API, which allows an iframe to read the origins of all ancestors.
From the sounds of it, I'm not sure there are any cross-origin protections. In the bugzilla discussion, it seems the proposal was initially rejected for privacy reasons. More recently it was added for web compatibility, but it is unclear if they actually addressed the original privacy concerns in the end.