W3C home > Mailing lists > Public > public-html@w3.org > August 2008

Re: <script src=javascript:"..."> should do nothing

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Mon, 11 Aug 2008 19:43:45 -0400
Message-ID: <48A0CEB1.80002@mit.edu>
To: Justin James <j_james@mindspring.com>
CC: "'Toby A Inkster'" <tai@g5n.co.uk>, public-html@w3.org


Justin James wrote:
> If other @src's allow javascript:, why *wouldn't* we allow it in <script>?

The spec currently does.

-Boris

Received on Monday, 11 August 2008 23:44:35 GMT

This message: [ Message body ]
Next message: Leif Halvard Silli: "Re: alt curly braces proposal in the editor's HTML5 draft"
Previous message: Leif Halvard Silli: "Re: Images and alternative text"
In reply to: Justin James: "RE: <script src=javascript:"..."> should do nothing"
Next in thread: Ian Hickson: "Re: <script src=javascript:"..."> should do nothing"
Reply: Ian Hickson: "Re: <script src=javascript:"..."> should do nothing"

Mail actions: [ respond to this message ] [ mail a new topic ]
Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]
Help: [ How to use the archives ] [ Search in the archives ]

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 7 December 2009 10:40:19 GMT