W3C home > Mailing lists > Public > public-web-security@w3.org > January 2010

Re: javascript URIs on stylesheets/redirections

From: gaz Heyes <gazheyes@gmail.com>
Date: Tue, 26 Jan 2010 10:38:06 +0000
Message-ID: <252dd75b1001260238kae9a955h776341903c8331eb@mail.gmail.com>
To: Ian Hickson <ian@hixie.ch>
Cc: sird@rckc.at, public-web-security@w3.org
2010/1/26 Ian Hickson <ian@hixie.ch>

> Again, whether it executes or not is not a matter for the HTML5 spec to
> define; I just want to make sure that if it _does_, the origin is
> well-defined.

Why not? What possible use could it be to execute javascript from that
context? If we define past mistakes at spec. level then those mistakes
aren't likely to be repeated no?
Received on Tuesday, 26 January 2010 10:38:53 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 20:26:17 UTC