W3C home > Mailing lists > Public > public-webapi@w3.org > March 2006

Re: ACTION-61: text for embedding part of the Window object

From: Maciej Stachowiak <mjs@apple.com>
Date: Fri, 24 Mar 2006 22:23:28 -0800
Message-Id: <1249024F-A51A-42A9-81E9-7FEDF2C1F479@apple.com>
Cc: "Web APIs WG (public)" <public-webapi@w3.org>
To: Boris Zbarsky <bzbarsky@mit.edu>


On Mar 6, 2006, at 11:09 PM, Boris Zbarsky wrote:

>
> Yet another question on window.name.  What should happen in the  
> situation that is described in https://bugzilla.mozilla.org/ 
> show_bug.cgi?id=269174 ?

It's not immediately clear to me.

The name set by "window.open" persists across document loads  
normally, and this seems analogous.

But it does seem bad for a document to be able to set state that  
breaks the behavior of another document loaded subsequently.

Can you think of a way the existing browser behavior might be  
exploitable?

Conversely, do you have a proposal for what the behavior should be?

At the very least, the Window spec should not rule out clearing the  
name property on navigation.

Regards,
Maciej
Received on Saturday, 25 March 2006 06:23:37 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 14:18:54 GMT