Let me know if there's still something to fix here.
Note that there's no need to file a bug if feedback on the spec is sent to
the list; I treat them both as input to the spec.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
On Wed, 28 Aug 2013, Brian Blakely wrote:
On Fri, Jul 12, 2013 at 1:32 PM, Ian Hickson i...@hixie.ch wrote:
You are welcome to register these on the wiki and convince people to
use them, sure.
Would you kindly link me to the wiki?
http://wiki.whatwg.org/wiki/MetaExtensions
--
Ian
On Thu, 22 Aug 2013, Andrew Oakley wrote:
On 19/09/12 01:18, Ian Hickson wrote:
I've changed the spec so that traversing the history by a delta always
cancels any pending navigations unless you're in the middle of an
unload, in which case it just aborts the algorithm entirely.
I've
speak 1:1
to individuals from various browser vendors.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
On Wed, 21 Aug 2013, TAMURA, Kent wrote:
On Sat, Jul 13, 2013 at 6:39 AM, Ian Hickson i...@hixie.ch wrote:
On Wed, 9 Jan 2013, TAMURA, Kent wrote:
On Wed, Nov 21, 2012 at 7:51 AM, Ian Hickson i...@hixie.ch wrote:
On Fri, 7 Sep 2012, TAMURA, Kent wrote:
* For date, datetime
are dashed, it's just that some have an infinitely long dash
with no space. Don't look at it as enabling/disabling dashing. :-)
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things
features too quickly, lest we get
too far ahead of browsers.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
On Tue, 20 Aug 2013, Tab Atkins Jr. wrote:
On Tue, Aug 20, 2013 at 3:46 PM, Ian Hickson i...@hixie.ch wrote:
On Tue, 30 Apr 2013, Rik Cabanier wrote:
I think the API should look like this:
void ellipse(unrestricted double x, optional unrestricted double y,
unrestricted double radiusX
On Tue, 17 Sep 2013, Rik Cabanier wrote:
On Tue, Sep 17, 2013 at 11:31 AM, Ian Hickson i...@hixie.ch wrote:
On Tue, 17 Sep 2013, Tab Atkins Jr. wrote:
I'm not a fan of sweep it under the carpet bug handling,
personally. It drives me crazy that JavaScript has no type
checking
to have errors that allowed the code
to continue anyway, the way we do e.g. in HTML parsing, where you can
easily run a validator to find out what you've done wrong, while still
having the errors swept under the carpet on the user's end.
--
Ian Hickson U+1047E
some dodginess around how elements are
inserted in the AAA, but I think it works there as well.
(The 'reset the form owner' algorithm can't associate cross-subtree; only
the parser can do this. So it's just the parser that needs fixing.)
--
Ian Hickson U+1047E
sheet.
Yes. That's a case we should probably make sure we handle.
So it could be added, well, just because there is no good reason not to.
There's always reasons not to add something:
http://wiki.whatwg.org/wiki/FAQ#Where.27s_the_harm_in_adding.E2.80.94
--
Ian Hickson U+1047E
than just that: it
also needs that browsers add language annotations during drag-and-drop and
copy-and-paste, at least. Is there anything else that it needs?
Will putting language information on drag-and-drop or copy/paste content
have any Web compat impact?
--
Ian Hickson U+1047E
.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
these use cases were valid; how do you think so?
I mean these are things that users want and that authors have to do.
Your e-mail is still on my list of e-mails to deal with. (Specifically,
it's in the pile of e-mail relating to new features.) It hasn't been
forgotten, don't worry. :-)
--
Ian Hickson
don't
specify the namespace.
I've added a redundant note to the parser intro about this, but it's
redundant -- it just references the terminology section and repeats the
same point again.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
.
Therefore, it would make sense to make surrogates parse errors.
Done.
It should be noted that they can only occur in the input stream if they
come from script (as they cannot be decoded from the input byte stream
as the decoders will never emit a surrogate).
Done.
--
Ian Hickson
On Thu, 12 Sep 2013, Robert O'Callahan wrote:
On Wed, Sep 11, 2013 at 11:24 AM, Ian Hickson i...@hixie.ch wrote:
On Wed, 11 Sep 2013, Robert O'Callahan wrote:
Pinch-zoom is hard because we don't want to trigger reflows or other
expensive behavior on pinch-zoom. I'd leave pinch-zoom out
. What's the attack model you
have in mind that this mitigates?
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
to be an aspirational superset.
(What's not ok would be for the spec to be incompatible with what the
browsers do -- neither a subset or a superset, but a different set.)
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
. changing font sizes):
http://damowmow.com/playground/demos/tables/004.html
Even today, the page loads in a few seconds, but hovering around that page
drops the frame rate of the page to single digits.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch
On Thu, 12 Sep 2013, Ryosuke Niwa wrote:
On Sep 12, 2013, at 11:43 AM, Ian Hickson i...@hixie.ch wrote:
So you also support having a Document descendant that is used for
Documents that have global scopes / browsing contexts / the works, and
one that is used for Documents that don't
On Tue, 13 Aug 2013, Ryosuke Niwa wrote:
On Jul 12, 2013, at 11:04 AM, Boris Zbarsky wrote:
On 7/12/13 1:57 PM, Ian Hickson wrote:
On Thu, 14 Mar 2013, Anne van Kesteren wrote:
On Tue, Mar 5, 2013 at 8:42 PM, Boris Zbarsky wrote:
On 3/5/13 3:30 PM, Ian Hickson wrote:
On Tue
On Thu, 12 Sep 2013, Ryosuke Niwa wrote:
On Sep 12, 2013, at 2:00 PM, Ian Hickson i...@hixie.ch wrote:
On Thu, 12 Sep 2013, Ryosuke Niwa wrote:
On Sep 12, 2013, at 11:43 AM, Ian Hickson i...@hixie.ch wrote:
So you also support having a Document descendant that is used for
Documents
On Wed, 11 Sep 2013, Anne van Kesteren wrote:
On Tue, Sep 10, 2013 at 8:54 PM, Ian Hickson i...@hixie.ch wrote:
On Fri, 12 Jul 2013, Anne van Kesteren wrote:
But then we shouldn't garble pathname either and we do because we
have to. So I'm not sure that line of reasoning makes sense. I do
On Wed, 11 Sep 2013, Anne van Kesteren wrote:
On Tue, Sep 10, 2013 at 8:34 PM, Ian Hickson i...@hixie.ch wrote:
On Wed, 10 Jul 2013, Rafael Weinstein wrote:
I'm curious: Is it useful to have fragment URL resolve against
anything other than the display url? I.e. when is the current
changing the width that causes a layout.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
On Wed, 11 Sep 2013, Rik Cabanier wrote:
On Wed, Sep 11, 2013 at 11:24 AM, Ian Hickson i...@hixie.ch wrote:
On Wed, 11 Sep 2013, Robert O'Callahan wrote:
Pinch-zoom is hard because we don't want to trigger reflows or other
expensive behavior on pinch-zoom. I'd leave pinch-zoom out
On Fri, 19 Jul 2013, Stuart Langridge wrote:
On Thu, Jul 18, 2013 at 11:48 PM, Ian Hickson i...@hixie.ch wrote:
but time is more of a problem if you have multiple things in one
cell. For example, one semi-common pattern is to put some data and
an input type=checkbox in a single
equivalent, you really
_should_ implement your own decoder, so you can do things like EXIF
manipulation, handle other image formats, do pngcrush-like work, etc.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
reported some feedback that I've lost track
of; I didn't see any when I looked just now.)
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
considered form
removal. If no browser implement it in due course, I'll remove it. Despite
being relatively commonly requested, it must be admitted that the use
cases for this feature aren't that compelling.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http
On Tue, 10 Sep 2013, Ian Hickson wrote:
In cases when the hostname is non-ASCII, the Referer header will
have it encoded in punycode.
Is that defined anywhere?
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.36 which
defines it syntactically as a URI
On Wed, 11 Sep 2013, Dean Jackson wrote:
On 11 Sep 2013, at 5:32 am, Ian Hickson i...@hixie.ch wrote:
On Wed, 11 Sep 2013, Dean Jackson wrote:
On 11 Sep 2013, at 12:14 am, Stephen White senorbla...@chromium.org
wrote:
now that some browsers are including browser zoom (page zoom
On Fri, 12 Jul 2013, Boris Zbarsky wrote:
On 7/12/13 2:15 PM, Ian Hickson wrote:
The document's referrer is not really defined anywhere in a useful
way that I can find.
What's not useful about the way it's defined? It's set to a specific
string.
I couldn't find where
On Tue, 10 Sep 2013, Boris Zbarsky wrote:
On 9/10/13 3:54 PM, Ian Hickson wrote:
[some sites compare values that are always-punycoded domains with
values that can be full Unicode for security checks]
Well, then they'll be broken, I guess. (They'll break safe, though.)
Well
not really understanding what you're proposing here. Can you
elaborate? What's the problem this is trying to solve? How would this work
in a multi-worker environment?
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
thing that makes the
implementations hard to read. The topic in question is complicated.
At the end of the day, there's a limit to how simply one can describe
something that is fundamentally complicated.
But as I said above, I'm very open to any suggestions.
--
Ian Hickson U+1047E
On Fri, 12 Jul 2013, Glenn Maynard wrote:
On Fri, Jul 12, 2013 at 2:45 PM, Ian Hickson i...@hixie.ch wrote:
Why? As a user on desktop, I can resize my window however I want, to
be landscape or portrait. Why wouldn't I be allowed to do the same on
any other device?
In mobile
On Fri, 19 Jul 2013, Brendan Long wrote:
On Jul 19, 2013 3:14 PM, Ian Hickson i...@hixie.ch wrote:
What if we added a supportedPlaybackRates attribute, which holds
an array of playback rates supported by the server, plus
(optionally) any rates the user agent can support due
think this solves the problem -- foolip's example would still
fail.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
to have fragment URL resolve against anything
other than the display url? I.e. when is the current behavior wrt
fragments appropriate.
It's a good question. I thought the old IETF specs for URLs said you had
to do otherwise, but nobody seems to have implemented that.
--
Ian Hickson
should do is also change the
window.devicePixelRatio for pinch zoom. Combined with the suggestions for
canvas, that would allow (as Rik pointed out on IRC) for high-quality
canvas all the way zoomed in, and for cheap canvases when zoomed out.
--
Ian Hickson U+1047E
. (Don't do both, though, please!).
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
at the canvas.
We would dump the *HD versions of the methods, and make the regular ones
go back to returning the actual raw pixels, since that would now work fine
and still provide HD-quality content everywhere it's available.
What do people think?
--
Ian Hickson U+1047E
On Tue, 10 Sep 2013, Ian Hickson wrote:
It would be nice to fix these all at once, and I think we can, by
introducing a configuration option on getContext(), in the style of
WebGL:
getContext('2d', { density: 'autosize' });
This would trigger the following behaviour: When
On Thu, 5 Sep 2013, Boris Zbarsky wrote:
On 9/4/13 8:07 PM, Ian Hickson wrote:
As far as I can tell, browsers keep treating it as an inline-block box
in those cases.
OK, that works, I guess. That does mean that buttons are a replaced
element, clearly, though... Something needs
or not.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
part of the experience.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
confirm
that this won't be in the spec? I'd like to remove it from Blink at
least.
Yeah, that seems bad since it's an interactive widget.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things
On Fri, 12 Jul 2013, Boris Zbarsky wrote:
On 7/12/13 3:39 PM, Ian Hickson wrote:
That wasn't the intent. I've tried to clarify it.
Hmm. It might help to make it clearer in
http://www.whatwg.org/specs/web-apps/current-work/multipage/history.html#navigate
that new resource does not mean
On Fri, 12 Jul 2013, Boris Zbarsky wrote:
On 7/12/13 4:08 PM, Ian Hickson wrote:
The HTML spec is pretty explicit about it not being:
# When the button binding applies to a button element, the element is
# expected to render as an 'inline-block' box rendered as a button whose
://www.w3.org/Bugs/Public/show_bug.cgi?id=22022.
I don't really understand the problem here. Can you elaborate? What
problem are you trying to resolve?
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
On Thu, 6 Jun 2013, Jonas Sicking wrote:
On Thu, Jun 6, 2013 at 2:08 PM, Ian Hickson i...@hixie.ch wrote:
On Fri, 15 Feb 2013, Jonas Sicking wrote:
Using semantic names might give us the warm fuzzies, but is there
really any semantic use we will get out of these that we wouldn't
On Sat, 8 Jun 2013, Jukka K. Korpela wrote:
2013-06-08 0:13, Ian Hickson wrote:
On Sun, 2 Jun 2013, Jukka K. Korpela wrote:
The purpose presented is to avoid markup generators from being
pressured into replacing the error of omitting the alt attribute
with the even more egregious
tested to see what browsers actually do in
this case. (This can only happen, as far as I can tell, in nested
showModalDialog() loops that happen to resume out-of-order. I suspect in
reality browsers won't let you do this, which would make this moot?)
--
Ian Hickson U+1047E
, 2013 at 3:08 AM, Ian Hickson i...@hixie.ch wrote:
On Wed, 12 Jun 2013, Silvia Pfeiffer wrote:
As we continue to evolve the functionality of text tracks, we will
introduce more complex other structured content into cues and we will
want browsers to parse and interpret them.
I think it's
getContext will
return null until you try to do it, given how getContext is specced.
I'm happy to try to tighten this up if you have any suggestions.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
. It's just not clear that there's a
compelling enough use case for it. How common is it for people to want to
provide sites such as you describe?
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
the user selects a file
That will be resolved once this is fixed:
https://www.w3.org/Bugs/Public/show_bug.cgi?id=22682
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things
are going to
implement it. But it's not clear to me what the definition should be. What
Chrome and Safari are doing today isn't a sane answer, IMHO.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
be great.
Note that if you post to this list, there's no point also filing a bug.
I'll get to the feedback either way eventually.
Cheers,
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things
have an
expensive API like this. But I guess I don't really know what the use
cases are, so it's hard to evaluate.
Anyway, I don't have a better suggestion right now. What has the
implementation experience been like so far?
--
Ian Hickson U+1047E
On Thu, 29 Aug 2013, Jonas Sicking wrote:
On Thu, Aug 29, 2013 at 1:20 PM, Ian Hickson i...@hixie.ch wrote:
On Fri, 2 Aug 2013, Jonathan Watt wrote:
I'm working on Mozilla's implementation of input type=file to allow
the user to pick a directory. The idea would be that the files
don't see any particular complication there.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
://whatwg.org/html) now uses the Encoding
standard (http://encoding.spec.whatwg.org/) to define UTF-8 processing.
Let us know if you see anything wrong with either of these specs!
Cheers,
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
this page visibility
event, instead of after the pagehide event.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
On Fri, 23 Aug 2013, Glenn Adams wrote:
On Fri, Aug 23, 2013 at 4:16 PM, Ian Hickson i...@hixie.ch wrote:
On Fri, 23 Aug 2013, Glenn Adams wrote:
As has been pointed out a number of times, there are already
implementations and JS client code using this technique.
Where?
I think
/problems.
This seems like a generic problem with every mechanism that uses IDs.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
On Mon, 26 Aug 2013, Ryosuke Niwa wrote:
On Apr 22, 2013, at 12:38 PM, Ian Hickson i...@hixie.ch wrote:
The current naming is based on window.showModalDialog() and
window.close(). I agree the naming is weird, but being consistent is
probably going to be more helpful on the long run
On Mon, 22 Apr 2013, Tab Atkins Jr. wrote:
On Mon, Apr 22, 2013 at 12:38 PM, Ian Hickson i...@hixie.ch wrote:
On Mon, 22 Apr 2013, Matt Falkenhagen wrote:
3. For centering in the viewport, the spec mandates that the used
value of 'top' be specially calculated. I found it more convenient
. Is there a CSS
value to explicitly select that yet?
Yes, fit-content http://dev.w3.org/csswg/css-sizing/#fit-content.
Thanks. Done.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things
On Wed, 21 Aug 2013, Elliott Sprehn wrote:
On Wed, Aug 21, 2013 at 3:58 PM, Ian Hickson i...@hixie.ch wrote:
Hm, I was given to understand that it *was* intended that dialogs be
able to escape iframes through some mechanism.
That isn't specced currently. I'm not 100% I understand
?
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
differently in CSS vs. 2D canvas.
Right. Underlining may fall into this bucket too.
But before we can determine this, we need to determine what your use case
is. What are you trying to do? Why?
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U
hesitate to
comment.
I can help if needed. I know the skia people are working on this as
well.
The algorithm is fairly straightforward to describe in prose.
Implementation is very hard though...
Please do add such help as comments on the bug, that would be very
helpful.
--
Ian
Cabanier wrote:
I think the exception on negative radius should also be removed.
What would a negative radius mean?
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just
the advantage of such a format. What problem are you
solving here?
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
inserted into the title element,
then you get an EOF token, and you unwind the parser and end.
What token are you getting that isn't handled?
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things
object.
This would ease management of ImageData instances.
We could have a constructor for ImageData objects, sure. That would be
relatively easy to add, if it's really needed. I don't understand why it's
hard to keep track of ImageData objects, though. Can you elaborate?
--
Ian Hickson
was successful, right?
Good point. Fixed. Thanks!
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
On Thu, 8 Aug 2013, Boris Zbarsky wrote:
On 8/8/13 5:05 PM, Ian Hickson wrote:
I think the problem is that I have no idea what these ES6 terms are or
what they mean.
OK. Which terms, exactly?
Probably all the JS terms that were introduced since the late 90s...
(Thanks for the education
to address
this request instead?
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
via
WebSocket.
Wouldn't you send that as a PNG and then just use ImageBitmap?
[snip the rest of this thread, which seemed to mainly discuss
implementation details -- without knowing what the use case is, it's
impossible to evaluate that level of detail]
--
Ian Hickson U+1047E
On Fri, 9 Aug 2013, Rik Cabanier wrote:
On Fri, Aug 9, 2013 at 1:32 PM, Ian Hickson i...@hixie.ch wrote:
On Mon, 11 Mar 2013, Kenneth Russell wrote:
It would be useful to be able to create an ImageData [1] object with
preexisting data. The main use case is to display arbitrary data
suggests
that A.txt would be the filename presented to the user by default in
the save dialog.
There's much more specific text later in the spec that answers this in
much more detail.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
On Fri, 9 Aug 2013, Jonas Sicking wrote:
On Fri, Aug 9, 2013 at 3:53 PM, Ian Hickson i...@hixie.ch wrote:
On Sat, 16 Mar 2013, Jonas Sicking wrote:
It's currently unclear what to do if a page contains markup like a
href=page.txt download=A.txt if the resource at audio.wav
responds
On Wed, 7 Aug 2013, Boris Zbarsky wrote:
On 8/7/13 5:18 PM, Ian Hickson wrote:
We could indeed move the indexed properties to WindowProxy, while
leaving the security checks (which apply to non-indexed properties
only) on Window. This would still address my concern, which is that if
we
On Thu, 8 Aug 2013, Jukka K. Korpela wrote:
2013-08-08 0:08, Ian Hickson wrote:
On Tue, 6 Aug 2013, Jukka K. Korpela wrote:
2013-08-06 17:45, Ian Hickson wrote:
If such an application needs some bulk of text data, it can be
included e.g. in script type=text/plain.../script
On Thu, 8 Aug 2013, Boris Zbarsky wrote:
On 8/8/13 2:11 AM, Ian Hickson wrote:
I would imagine most languages other than JavaScript would break that
invariant.
Why are we suddenly worrying about languages other than JavaScript?
It's not sudden. The HTML spec has tried to be language
On Thu, 8 Aug 2013, Boris Zbarsky wrote:
On 8/8/13 7:22 AM, Boris Zbarsky wrote:
On 8/8/13 2:11 AM, Ian Hickson wrote:
I would imagine most languages other than JavaScript would break
that invariant.
Why are we suddenly worrying about languages other than JavaScript?
Let me try
On Thu, 8 Aug 2013, Jukka K. Korpela wrote:
2013-08-08 9:13, Ian Hickson wrote:
XHR uses the same underlying logic as img src= and script
src=. If you're able to conjur a file up for img src= or
script src=, then I don't see why you wouldn't be able to conjur
it up for XHR.
When
that is, but in the English meaning) everything
to the underlying Window object.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
On Fri, 2 Aug 2013, Boris Zbarsky wrote:
On 8/2/13 10:35 PM, Ian Hickson wrote:
Honestly, though, at the point where you're able to trick a
similar-origin site into changing document.domain so you can attack it
document.domain was not involved in any way in the cross-site issues
I've
On Tue, 6 Aug 2013, Jukka K. Korpela wrote:
2013-08-06 17:45, Ian Hickson wrote:
If such an application needs some bulk of text data, it can be
included e.g. in script type=text/plain.../script but not in a
separate plain text file (included into the application
distribution
than what it describes. Also, it would
complicate the WindowProxy magic -- now, instead of it just being a proxy,
it would be a proxy except for certain properties.
Can you elaborate on what the problem is with the current approach?
--
Ian Hickson U+1047E
On Tue, 6 Aug 2013, Boris Zbarsky wrote:
On 8/6/13 5:58 PM, Ian Hickson wrote:
Parsing is easy to do on a separate worker, because it has no
dependencies -- you can do it all in isolation.
Sadly, that may not be the [case].
Actual JS implementations have various thread-local data
in the sandbox attribute's token list.
I don't really understand why even without a sandbox attribute, a page
should be allowed to force a download.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A
On Tue, 6 Aug 2013, Jukka K. Korpela wrote:
2013-08-06 2:27, Ian Hickson wrote:
On Thu, 7 Feb 2013, Jukka K. Korpela wrote:
[...]
It's a bit odd that if you wish to set up a standalone application
running in a browser (often called HTML5 application, without
implying any particular
languages, but since
it's a one-off object, maybe it's not worth it.
--
Ian Hickson U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/ U+263A/, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
301 - 400 of 4836 matches
Mail list logo
