[Bug 13720] Define javascript: processing entirely inline, and make it only happen in the navigation algorithm; then, remove special-casing elsewhere, and make it non-conforming in those places

https://www.w3.org/Bugs/Public/show_bug.cgi?id=13720

--- Comment #12 from Ian 'Hixie' Hickson <ian@hixie.ch> ---
We do need this case to run the JS async, though:

   frame = document.createElement('iframe');
   frame.src = 'javascript:alert(2);'; // alerts second
   document.body.appendChild(frame);
   alert(1); // alerts first

Maybe queue a task to run the script, and have the "Wait for one or more bytes"
step be ready to wait for bytes from either fetch or this JS deref task.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Friday, 25 October 2013 18:24:46 UTC