Re: [whatwg] Pseudo-class ::scrollbar

2010-11-12 Thread Tab Atkins Jr.
On Fri, Nov 12, 2010 at 4:55 PM, Diogo Resende wrote: > Hi, > > Is there any draft or spec for styling element scrollbars? I really like > the webkit spec (::-webkit-scrollbar*). I think this is as important as > styling buttons or video controls. Any security concerns I don't know > about? This

[whatwg] Pseudo-class ::scrollbar

2010-11-12 Thread Diogo Resende
Hi, Is there any draft or spec for styling element scrollbars? I really like the webkit spec (::-webkit-scrollbar*). I think this is as important as styling buttons or video controls. Any security concerns I don't know about? -- Diogo

Re: [whatwg] Should script run if it comes from a HTML fragment?

2010-11-12 Thread Jonas Sicking
On Fri, Nov 12, 2010 at 2:54 PM, Ryosuke Niwa wrote: > On Fri, Nov 12, 2010 at 2:29 PM, Jonas Sicking wrote: >> >> You looking at only part of what Henri said. He also pointed to >> >> http://www.w3.org/Bugs/Public/show_bug.cgi?id=11191 >> >> which is a request to change HTML5 so that createConte

Re: [whatwg] Should script run if it comes from a HTML fragment?

2010-11-12 Thread Ryosuke Niwa
On Fri, Nov 12, 2010 at 2:29 PM, Jonas Sicking wrote: > > You looking at only part of what Henri said. He also pointed to > > http://www.w3.org/Bugs/Public/show_bug.cgi?id=11191 > > which is a request to change HTML5 so that createContextualFragment > can specify that scripts should remain executa

[whatwg] Clarification request on Server-Sent Events Last-Event-ID

2010-11-12 Thread Nicholas Zakas
Just a quick question about the Last-Event-ID header. The spec currently says: >>If the event source's last event ID string is not the empty string, then a >>Last-Event-ID HTTP header must be included with the request, whose value is >>the value of the event source's last event ID string, encode

Re: [whatwg] Should script run if it comes from a HTML fragment?

2010-11-12 Thread Jonas Sicking
On Fri, Nov 12, 2010 at 12:48 PM, Ryosuke Niwa wrote: > On Thu, Nov 11, 2010 at 5:48 PM, Jonas Sicking  wrote: >> >> When setting .innerHTML browsers always have prevented any created >>

Re: [whatwg] Encrypted HTTP and related security concerns - make mixed content warnings accessible from JS?

2010-11-12 Thread Ingo Chao
2010/11/12, Daniel Veditz : > On 11/11/10 12:06 PM, Ingo Chao wrote: >> For https mashups, users will see always a few >> security warnings in IE or Chrome, because a few components will be >> delivered via http. Thats good, but I would like to know that, too. >> The mashup should report that autom

Re: [whatwg] Should script run if it comes from a HTML fragment?

2010-11-12 Thread Ryosuke Niwa
On Thu, Nov 11, 2010 at 5:48 PM, Jonas Sicking wrote: > > When setting .innerHTML browsers always have prevented any created >

Re: [whatwg] Encrypted HTTP and related security concerns - make mixed content warnings accessible from JS?

2010-11-12 Thread Daniel Veditz
On 11/11/10 12:06 PM, Ingo Chao wrote: > For https mashups, users will see always a few > security warnings in IE or Chrome, because a few components will be > delivered via http. Thats good, but I would like to know that, too. > The mashup should report that automatically. Hence my question > rega