Comment by SoftTalker

As long as same-origin is enforced this is probably OK? I'm going to steal my own secrets?