html5/workers Overview.html,1.166,1.167

Update of /sources/public/html5/workers
In directory hutz:/tmp/cvs-serv29462

Modified Files:
	Overview.html 
Log Message:
clarify that data: and javascript: don't work as worker scripts (whatwg r3857)

Index: Overview.html
===================================================================
RCS file: /sources/public/html5/workers/Overview.html,v
retrieving revision 1.166
retrieving revision 1.167
diff -u -d -r1.166 -r1.167
--- Overview.html	14 Sep 2009 10:58:39 -0000	1.166
+++ Overview.html	15 Sep 2009 08:29:33 -0000	1.167
@@ -169,7 +169,7 @@
    <h1>Web Workers</h1>
    <!--ZZZ:-->
    <!--<h2 class="no-num no-toc">W3C Working Draft 23 April 2009</h2>-->
-   <h2 class="no-num no-toc" id="editor-s-draft-14-september-2009">Editor's Draft 14 September 2009</h2>
+   <h2 class="no-num no-toc" id="editor-s-draft-15-september-2009">Editor's Draft 15 September 2009</h2>
    <!--:ZZZ-->
    <dl><!-- ZZZ: update the month/day (twice), (un)comment out
     <dt>This Version:</dt>
@@ -237,7 +237,7 @@
   specification's progress along the W3C Recommendation track.
   <!--ZZZ:-->
   <!--This specification is the 23 April 2009 Working Draft.-->
-  This specification is the 14 September 2009 Editor's Draft.
+  This specification is the 15 September 2009 Editor's Draft.
   <!--:ZZZ-->
   </p><!-- UNDER NO CIRCUMSTANCES IS THE PRECEDING PARAGRAPH TO BE REMOVED OR EDITED WITHOUT TALKING TO IAN FIRST --><!-- relationship to other work (required) --><p>This specification is also being produced by the <a href="http://www.whatwg.org/">WHATWG</a>. The two specifications are
   identical from the table of contents onwards.</p><!-- UNDER NO CIRCUMSTANCES IS THE FOLLOWING PARAGRAPH TO BE REMOVED OR EDITED WITHOUT TALKING TO IAN FIRST --><!-- UNDER NO CIRCUMSTANCES IS THE PRECEDING PARAGRAPH TO BE REMOVED OR EDITED WITHOUT TALKING TO IAN FIRST --><!-- context and rationale (required) --><p>This specification is intended to specify a part of the Web
@@ -1561,11 +1561,20 @@
    <li><p>If this fails, throw a <code>SYNTAX_ERR</code>
    exception.</li>
 
-   <li><p>If the <span>origin</span> of the resulting <span>absolute
-   URL</span> is not the <span title="same origin">same</span> as the
-   origin of the <span title="concept-script">script</span> that
-   invoked the constructor, then throw a <span>security
-   exception</span>.</li>
+   <li>
+
+    <p>If the <span>origin</span> of the resulting <span>absolute
+    URL</span> is not the <span title="same origin">same</span> as the
+    origin of the <span title="concept-script">script</span> that
+    invoked the constructor, then throw a <span>security
+    exception</span>.</p>
+
+    <p class="note">Thus, scripts must be external files with the same
+    scheme as the original page: you can't load a script from a <code title="">data:</code> URL or <code title="">javascript:</code>
+    URL, and a <code>https:</code> page couldn't start workers using
+    scripts with <code>http:</code> URLs.</p>
+
+   </li>
 
    <li><p><span>Create a new <code><a href="#dedicatedworkerglobalscope">DedicatedWorkerGlobalScope</a></code>
    object</span>. Let <var title="">worker global scope</var> be this
@@ -1660,10 +1669,19 @@
    argument, or the empty string if the second argument was
    omitted.</li>
 
-   <li><p>If the <span>origin</span> of <var title="">scriptURL</var>
-   is not the <span title="same origin">same</span> as the origin of
-   the script that invoked the constructor, then throw a
-   <span>security exception</span>.</li>
+   <li>
+
+    <p>If the <span>origin</span> of <var title="">scriptURL</var> is
+    not the <span title="same origin">same</span> as the origin of the
+    script that invoked the constructor, then throw a <span>security
+    exception</span>.</p>
+
+    <p class="note">Thus, scripts must be external files with the same
+    scheme as the original page: you can't load a script from a <code title="">data:</code> URL or <code title="">javascript:</code>
+    URL, and a <code>https:</code> page couldn't start workers using
+    scripts with <code>http:</code> URLs.</p>
+
+   </li>
 
    <li>
 

Received on Tuesday, 15 September 2009 08:29:46 UTC