spec/Overview.html 1.1231 2046 Require that <script src=javascript:...>

Require that <script src=javascript:...></script> result in no script
execution, for any value of '...', for compatibility with most UAs.
(whatwg r2046)

Running a script
http://people.w3.org/mike/diffs/html5/spec/Overview.1.1231.html#running
completed loading
http://people.w3.org/mike/diffs/html5/spec/Overview.1.1231.html#completed

http://people.w3.org/mike/diffs/html5/spec/Overview.diff.html
http://dev.w3.org/cvsweb/html5/spec/Overview.html?r1=1.1230&r2=1.1231&f=h
http://html5.org/tools/web-apps-tracker?from=2045&to=2046

===================================================================
RCS file: /sources/public/html5/spec/Overview.html,v
retrieving revision 1.1230
retrieving revision 1.1231
diff -u -d -r1.1230 -r1.1231
--- Overview.html 11 Aug 2008 08:23:56 -0000 1.1230
+++ Overview.html 11 Aug 2008 10:14:40 -0000 1.1231
@@ -26339,6 +26339,14 @@
      href="#src9">src</a></code> attribute, then the specified resource must
      be <a href="#fetch" title=fetch>fetched</a>.</p>
 
+    <p>For historical reasons, if the <a href="#url">URL</a> is a <a
+     href="#the-javascript" title="javascript protocol"><code
+     title="">javascript:</code> URL</a>, then the user agent must not,
+     despite the requirements in the definition of the <a href="#fetch"
+     title=fetch>fetching</a> algorithm, actually execute the given script,
+     and instead the user agent must act as if it had received an empty HTTP
+     400 response.</p>
+
     <p>Once the fetching process has completed, and the script has <dfn
      id=completed>completed loading</dfn>, the user agent will have to
      complete <a href="#when-a" title="when a script completes loading">the

Received on Monday, 11 August 2008 10:18:16 UTC