W3C home > Mailing lists > Public > public-html@w3.org > May 2009

RE: HTML interpreter vs. HTML user agent

From: Larry Masinter <masinter@adobe.com>
Date: Sun, 31 May 2009 07:54:55 -0700
To: Maciej Stachowiak <mjs@apple.com>, Adam Barth <w3c@adambarth.com>
CC: Sam Ruby <rubys@intertwingly.net>, Anne van Kesteren <annevk@opera.com>, "Roy T. Fielding" <fielding@gbiv.com>, HTML WG <public-html@w3.org>
Message-ID: <8B62A039C620904E92F1233570534C9B0118CD95EC76@nambx04.corp.adobe.com>
About Safari's feed reader, Maciej wrote:

> 2) We can also display a user-selected collection of feeds as one  
> document, again displayed as HTML.
> 3) We don't execute any script that came from the feed in the context  
> of generated HTML document. At the very least due to point #2 this  
> would be insecure.
> 4) We don't let any web page access the contents of the generated HTML  
> document via script.

Doesn't this somehow create a "restricted HTML" which is allowed in
a feed? The HTML in a feed can't be scripted at all? Or the scripts
can't access the HTML of their subsection?

I was wondering how HTML-in-webmail could work, since the HTML of
the mail needs to be embedded in the HTML of the webmail client itself.

Where in the HTML spec is this addressed?

Larry
-- 
http://larry.masinter.net
Received on Sunday, 31 May 2009 14:55:42 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Wednesday, 9 May 2012 00:16:37 GMT