[whatwg] Which mechanisms does HTML5 have in place to combat XSS attacks?

Q1. I know Mozilla and Microsoft have provided some ways (respectively, CSP, XSS filter) to mitigate or detect XSS attacks. so I wonder whether HTML5 will present an approach to fight this attacks? Q2. I also saw Chrome and Safari have present some ways to fight XSS attacks , however, I always

[whatwg] Which vulnerabilities in HTML4 are (partially) solved in HTML5

I saw the iframe element adds the attribute 'sandbox' in HTML5, which can better protect users from malicious content. so I want to know whether or not there are other changes, HTML5 can (partially) solve some vulnerabilities in HTML4 ? thanks.

[whatwg] Differences between HTML5 Drafts

I want to know the differences between these HTML5 drafts( I don't want to know more details about the differences, and just want to know the major changes), Could someone know where to find such Information? Thanks

Re: [whatwg] Differences between HTML5 Drafts

WHATWG version. thanks On Thu, Sep 9, 2010 at 1:19 AM, Tab Atkins Jr. jackalm...@gmail.com wrote: On Wed, Sep 8, 2010 at 10:11 AM, zhao Matt mattzhao...@gmail.com wrote: I want to know the differences between these HTML5 drafts( I don't want to know more details about the differences

Re: [whatwg] Differences between HTML5 Drafts

Also, I found a W3C draft's publication notes at http://www.w3.org/TR/2008/NOTE-html5-pubnotes-20080610/. However, I can't find other draft's publication notes. On Thu, Sep 9, 2010 at 1:31 AM, zhao Matt mattzhao...@gmail.com wrote: WHATWG version. thanks On Thu, Sep 9, 2010 at 1:19 AM, Tab

Re: [whatwg] Differences between HTML5 Drafts

browsers? On Thu, Sep 9, 2010 at 1:34 AM, Mihai Parparita mih...@chromium.org wrote: http://html5.org/tools/web-apps-tracker shows recent changes (with diffs). Mihai On Wed, Sep 8, 2010 at 10:31 AM, zhao Matt mattzhao...@gmail.com wrote: WHATWG version. thanks On Thu, Sep 9, 2010 at 1:19 AM

Re: [whatwg] Differences between HTML5 Drafts

thanks On Thu, Sep 9, 2010 at 1:43 AM, Simon Pieters sim...@opera.com wrote: On Wed, 08 Sep 2010 19:39:18 +0200, zhao Matt mattzhao...@gmail.com wrote: Also, I found a W3C draft's publication notes at http://www.w3.org/TR/2008/NOTE-html5-pubnotes-20080610/. However, I can't find other

Re: [whatwg] Why is the feature Web Storage removed from HTML5 Spec?

, 2010 at 7:19 AM, zhao Matt mattzhao...@gmail.com wrote: I saw HTML5 spec 's introductionhttp://www.whatwg.org/specs/web-apps/current-work/multipage/introduction.html#introductionincludes the following content, Features that are not currently in this document that were in the past

[whatwg] Why is the feature Web Storage removed from HTML5 Spec?

I saw HTML5 spec 's introductionhttp://www.whatwg.org/specs/web-apps/current-work/multipage/introduction.html#introductionincludes the following content, Features that are not currently in this document that were in the past considered part of HTML5...,, include:... Web Storage I know Web Storage

[whatwg] Which differences between embed and object

According to HTML5 spec, the embed tag can play a swf file, however, the object tag can also play a swf file (though object is defined in HTML4). I don't understand why need the embed tag , because the object tag can support(or embed) many objects such as images, audio, videos, Java applets,

[whatwg] The Attributes of the script element

Quote from: HTML spec -4.3 Scripting Otherwise: The user agent must immediately execute the script block, even if other scripts are already executing. Quote from: JavaScript - The Definitive Guide, 5th Edition The core JavaScript language does not contain any threading mechanism, and

[whatwg] Questions about script attributes in HTML5

Quote: The async and defer attributes are boolean attributes that indicate how the script should be executedThe defer attribute may be specified even if the async attribute is specified Do it mean 'async' is equivalent to 'defer'? (namely, are the two attributes interchangeable?) I personally