W3C home > Mailing lists > Public > public-html-bugzilla@w3.org > October 2013

[Bug 13720] Define javascript: processing entirely inline, and make it only happen in the navigation algorithm; then, remove special-casing elsewhere, and make it non-conforming in those places

From: <bugzilla@jessica.w3.org>
Date: Fri, 25 Oct 2013 18:24:44 +0000
To: public-html-bugzilla@w3.org
Message-ID: <bug-13720-2486-Z867x2rDOY@http.www.w3.org/Bugs/Public/>
https://www.w3.org/Bugs/Public/show_bug.cgi?id=13720

--- Comment #12 from Ian 'Hixie' Hickson <ian@hixie.ch> ---
We do need this case to run the JS async, though:

   frame = document.createElement('iframe');
   frame.src = 'javascript:alert(2);'; // alerts second
   document.body.appendChild(frame);
   alert(1); // alerts first

Maybe queue a task to run the script, and have the "Wait for one or more bytes"
step be ready to wait for bytes from either fetch or this JS deref task.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
Received on Friday, 25 October 2013 18:24:46 UTC

This archive was generated by hypermail 2.3.1 : Wednesday, 7 January 2015 16:31:45 UTC