Josh Matthews 9334d3094b script: Use the global's origin when claiming blob tokens. (#44004) ...

`global.api_base_url().origin()` returns a unique opaque origin when the
base URL is an opaque origin. When we use the global's origin instead,
requests for claimed blobs can now pass the same-origin check.

Testing: Newly passing tests.
Fixes: #43326
Fixes: #43973

---------

Signed-off-by: Josh Matthews <josh@joshmatthews.net>

2026-04-07 19:40:15 +00:00

32 KiB

Raw Blame History

View Raw