Re: [whatwg] Dealing with UI redress vulnerabilities inherent to the current web

2008-10-12 Thread Adam Barth
On Sat, Oct 11, 2008 at 11:29 PM, Jonas Sicking <[EMAIL PROTECTED]> wrote: > Collin Jackson wrote: [snip] >> If a cookie is set with a >> "sameOrigin" flag, we could prevent that cookie from being sent on >> HTTP requests that are initiated by other origins, or were made by >> frames with ancestors

[whatwg] document.cookies

2008-10-12 Thread Garrett Smith
Excerpt: "prevents script from reading the document.cookies DOM attribute." http://www.whatwg.org/specs/web-apps/current-work/#sandboxed-origin-browsing-context-flag Should this be |document.cookie| instead of document.cookies? Garrett

Re: [whatwg] Simplified WebSockets

2008-10-12 Thread Shannon
I have written an implementation of a websocket client and server for testing my proposed protocol. Testing in the real world has provided me some good information on what works and what doesn't, particularly in regards to relaying through public anonymous proxies. Those wishing to experiment w