Re: Trusted shims and polyfills

On Mon, Dec 10, 2012 at 8:00 PM, Fred Andrews <fredandw@live.com> wrote:

> Could the group please consider the possibility of trusted shims and
> polyfills so that even extensions such as noscript might still allow
> trusted polyfills to be used and that browsers might implement a mode
> between JS-enabled and JS-disabled that allows only trusted polyfills.
> There is a great need to experiment with interactive declarative extensions
> for users wanting to work with JS-disabled and the work of this group might
> be able to help.  For example, the topic of interactive menus has come up
> again recently on the WHATWG list and I think it would help the development
> of the web if content authors could experiment with designs.
>
> One option might be for the UA to store a hash for the resources to
> identify them.
>
> It might be expected that a polyfill is common code among many webpages,
> and could the group consider methods to avoid redundant storage of such
> resources, and also how they could work well offline.  Could a polyfill be
> loaded and managed as a browser extension, with a meta tag declaring the
> need for the polyfill?
>
> With a lot of experimentation going on, there is bound to be some
> conflict, such as extensions that want to use the same attribute or element
> name.  Perhaps some thought could be given to ways this group could help
> manage such conflict - guidelines, etc.
>
> cheers
> Fred
>
>

Can you share more about your thoughts on trusted/no script?  I'm not sure
where you are going with that.  I don't think browser extensions for
prollyfills are a viable option, personally, but maybe someone could change
my mind (I kind of doubt it, but maybe).

We have already discussed/it has been proposed that implementation could
potentially be bound with a data- attribute in HTML (or something
declarative and 'close to use')... We do this in hitch where the author is
in control of which things are imported (including version) so there isn't
a risk of conflict any more than there is in any programming language which
allows a concept of import or require (pretty much all of them) and
generally speaking, that works pretty well outside of mashup kind of
situations which probably should be sandboxed anyway. I'm not sure how much
anyone buys into that but it's been proposed :)




-- 
Brian Kardell :: @briankardell :: hitchjs.com