Re: Importing modules inside HTML imports

2014-08-17 Thread Brendan Eich
John Barton wrote: The argument goes like this: we all want secure Web pages, we can't secure Web pages that allow inline scripts, therefore we have to ban inline scripts. Nice syllogism but for the minor premise. Evidence? Links? Proof would be even better, but we're far afield from logic or

Re: Importing modules inside HTML imports

2014-08-17 Thread Rick Waldron
On Sun, Aug 17, 2014 at 2:52 PM, John Barton wrote: > > > > On Sun, Aug 17, 2014 at 11:14 AM, Rick Waldron > wrote: > >> >> >> On Sunday, August 17, 2014, John Barton wrote: >> >>> >>> >>> >>> On Sun, Aug 17, 2014 at 10:08 AM, Brendan Eich >>> wrote: >>> John Barton wrote: On S

Re: Importing modules inside HTML imports

2014-08-17 Thread David Bruant
Le 17/08/2014 20:52, John Barton a écrit : On Sun, Aug 17, 2014 at 11:14 AM, Rick Waldron > wrote: On Sunday, August 17, 2014, John Barton mailto:johnjbar...@google.com>> wrote: On Sun, Aug 17, 2014 at 10:08 AM, Brendan Eich wrote:

Re: Importing modules inside HTML imports

2014-08-17 Thread John Barton
On Sun, Aug 17, 2014 at 11:14 AM, Rick Waldron wrote: > > > On Sunday, August 17, 2014, John Barton wrote: > >> >> >> >> On Sun, Aug 17, 2014 at 10:08 AM, Brendan Eich >> wrote: >> >>> John Barton wrote: >>> >>> On Sat, Aug 16, 2014 at 10:22 AM, Brendan Eich >>> > w

Re: Importing modules inside HTML imports

2014-08-17 Thread Brendan Eich
Rick Waldron wrote: I agree, but the forces behind CSP control the servers. You'll have to convince them. Forgive me, but I don't follow this—could you elaborate? It would be appreciated. Inside-Google baseball, and I'll believe it when I see it. /be __

Re: Importing modules inside HTML imports

2014-08-17 Thread Rick Waldron
On Sunday, August 17, 2014, John Barton wrote: > > > > On Sun, Aug 17, 2014 at 10:08 AM, Brendan Eich > wrote: > >> John Barton wrote: >> >> On Sat, Aug 16, 2014 at 10:22 AM, Brendan Eich >> >> bren...@mozilla.org >>> >> wrote: >>> >>> Yes -- inline scripts, like document.write, the drive-

Re: Importing modules inside HTML imports

2014-08-17 Thread John Barton
On Sun, Aug 17, 2014 at 10:08 AM, Brendan Eich wrote: > John Barton wrote: > > On Sat, Aug 16, 2014 at 10:22 AM, Brendan Eich > > wrote: >> >> Yes -- inline scripts, like document.write, the drive-in, disco, >> and Fortran, will never die. >> >> >> More things

Re: Importing modules inside HTML imports

2014-08-17 Thread Brendan Eich
John Barton wrote: On Sat, Aug 16, 2014 at 10:22 AM, Brendan Eich > wrote: Yes -- inline scripts, like document.write, the drive-in, disco, and Fortran, will never die. More things I don't suggest investing effort in. Seriously, inline scripts were and are

Re: Importing modules inside HTML imports

2014-08-17 Thread John Barton
On Sat, Aug 16, 2014 at 10:22 AM, Brendan Eich wrote: > Yes -- inline scripts, like document.write, the drive-in, disco, and > Fortran, will never die. More things I don't suggest investing effort in. > > > /be > > > Anne van Kesteren wrote: > >> On Sat, Aug 16, 2014 at 2:46 AM, John Barton >