W3C home > Mailing lists > Public > public-html-bugzilla@w3.org > January 2011

[Bug 11105] Prevent execution of scripts in documents that don't have a browsing context after 'already started' has been set

From: <bugzilla@jessica.w3.org>
Date: Mon, 03 Jan 2011 11:45:41 +0000
To: public-html-bugzilla@w3.org
Message-Id: <E1PZir7-0003I7-M3@jessica.w3.org>
http://www.w3.org/Bugs/Public/show_bug.cgi?id=11105

--- Comment #3 from Henri Sivonen <hsivonen@iki.fi> 2011-01-03 11:45:40 UTC ---
(In reply to comment #2)
> IIRC the spec already says that scripts in documents without browsing contexts
> don't run, but that happens later (in the same place that tries to run event
> handler attributes, e.g.).

I tried to find this in the spec but failed. If this indeed is already in the
spec, please add a note to the "run" algorithm highlighting this. Furthermore,
I think external scripts should fail after their "already started" flag has
been set but before a fetch is initiated if there's no browsing context.

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
Received on Monday, 3 January 2011 11:45:43 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 3 January 2011 11:45:43 GMT