W3C home > Mailing lists > Public > public-html@w3.org > March 2011

[Bug 12392] New: Behavior for target attribute links should be better defined for sandboxed contexts

From: <bugzilla@jessica.w3.org>
Date: Tue, 29 Mar 2011 07:06:24 +0000
To: public-html@w3.org
Message-ID: <bug-12392-2495@http.www.w3.org/Bugs/Public/>
http://www.w3.org/Bugs/Public/show_bug.cgi?id=12392

           Summary: Behavior for target attribute links should be better
                    defined for sandboxed contexts
           Product: HTML WG
           Version: unspecified
          Platform: PC
               URL: http://dev.w3.org/html5/spec/Overview.html#attr-iframe
                    -sandbox
        OS/Version: Windows NT
            Status: NEW
          Severity: normal
          Priority: P2
         Component: HTML5 spec (editor: Ian Hickson)
        AssignedTo: ian@hixie.ch
        ReportedBy: jrossi@microsoft.com
         QAContact: public-html-bugzilla@w3.org
                CC: mike@w3.org, public-html-wg-issue-tracking@w3.org,
                    public-html@w3.org


It might be good to spell out the behavior for each of the various
possibilities for the target attribute when activated from within a sandboxed
iframe. My expectation is that it would be defined as follows:

_blank  =>  fails
_self => navigates the iframe's browsing context
_parent => fails unless parent is top and the "sandboxed top-level navigation
browsing context flag" is not set
_top => fails unless the "sandboxed top-level navigation browsing context flag"
is not set
windowName => ok if windowName is
        a) the sandboxed iframe itself
        b) a descendent browsing context of the sandboxed iframe
        c) the top browsing context and the "sandboxed top-level navigation
browsing context flag" is not set

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
Received on Tuesday, 29 March 2011 07:06:26 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Wednesday, 9 May 2012 00:17:26 GMT