- From: Jonas Sicking <jonas@sicking.cc>
- Date: Tue, 07 Mar 2006 00:22:29 -0800
- To: Anne van Kesteren <annevk@opera.com>
- Cc: "Web APIs WG (public)" <public-webapi@w3.org>
> <code>Window.frameElement</code> from a child document MUST reflect the > referencing element or <code>null</code> if there is no such element. > <code>Window.parent</code> MUST reflect the parent document Window > object or <code>null</code> if there is no such document. > <code>Window.top</code> MUST reflect the root document Window object. > Using <code>Window.top</code> within the root document makes no > difference. Implementations MAY throw for any of these attributes for > security reasons. Some language specific bindings allow these DOM > attributes, even though readonly, to be set to different values. In > such cases UAs reflect the values set by the script author. > > ISSUE: Because implementations MAY throw the MUST should probably be > SHOULD... I'm not sure that it's a good idea to define the exact security policy here. Shouldn't we allow implementations to return null rather then throwing? / Jonas
Received on Tuesday, 7 March 2006 08:22:44 UTC