So, the E-mail to Ben Peters bounced - he's no longer at Microsoft? Is
there anyone on the IE team present on the list who is able to comment on
this?
-Hallvord R
On Mon, Apr 20, 2015 at 10:38 PM, Hallvord Reiar Michaelsen Steen <
hst...@mozilla.com> wrote:
>
> > In addition, from a security pers
> > In addition, from a security perspective, what stops a malicious website
> from embedding something like style="display:none"> in the markup?
>
> We disallow this on copy by stripping such references.
>
Hi Ben,
picking up this old thread..
So we need to add a "sanitize local references" step
Hi Daniel,
> I'm trying to make sure I correctly understand how the IE11 version of this
> works. From the sample
> (http://msdn.microsoft.com/en-us/library/ie/dn254935(v=vs.85).aspx), it looks
> like if a user pastes in some HTML that references local images, IE11
> automatically captures the
On Wed, Feb 12, 2014 at 1:25 AM, Hallvord R. M. Steen wrote:
> > Hi Hallvord!
>
> Hi Ben! Thanks for responding to my request for feedback - especially
> since the IE team has done some interesting work in this area and is
> arguably ahead of the rest! :-)
>
> > The IE11 API you mentioned is msCon
Second, can you provide the javascript for how a site would put them into
the pasted markup during paste?
>>> The way I thought this would work, would be that the site starts XHR
>>> uploads from the paste processing, and shows some intermediate 'loading'
>>> animation or something be
>> Of course it would be nice to support a script that wants to generate random
>> HTML with embedded files
>> use case for example with a CANVAS app where the script wants to copy the
>> state of the CANVAS
> I was thinking about images that aren't available cross-domain
Indeed, that's anot
> Of course it would be nice to support a script that wants to generate random
> HTML with embedded files to place on the clipboard (although I think most of
> those use cases can already be met by using URLs and assuming that any
> software reading HTML from the clipboard can understand URLs..)
Hi Hallvord!
The IE11 API you mentioned is msConvertURL [1] (also on the IE blog [2]), and
it was designed as a simple way for sites to choose DataURI or Blob for
otherwise inaccessible images. We default to DataURI to be interoperable with
Firefox’s current design of always doing DataURI for l
> Hi Hallvord!
Hi Ben! Thanks for responding to my request for feedback - especially since the
IE team has done some interesting work in this area and is arguably ahead of
the rest! :-)
> The IE11 API you mentioned is msConvertURL [1] (also on the IE blog [2]), and
> it was designed as a
> sim
