Re: img issue: should we restrict the URI

On Jan 25, 2008, at 11:40 AM, Boris Zbarsky wrote:

> In particular, the content of an <img> is guaranteed to be static  
> content in the sense that it won't run JavaScript (though I do  
> wonder how Opera's SVG and Safari's PDF handling play there; I would  
> hope they disable JavaScript when embedding SVG and PDF via <img>).

WebKit disables JavaScript within SVG content used as an image (<img>,  
background-image, etc.). I don't know the answer for PDF content used  
as an image.

-Adam