RE: [DOM3 Events/DOM4] re-dispatching trusted events with initEvent

Glenn, isTrusted is the indicator that helps the web developer distinguish between an event fired by the UA, or one fired by JavaScript (e.g., dispatchEvent).

From: Glenn Maynard [mailto:glenn@zewt.org]
Sent: Tuesday, April 24, 2012 12:38 PM
To: olli@pettay.fi
Cc: Travis Leithead; public-webapps@w3c.org; Anne van Kesteren (annevk@opera.com); Jacob Rossi
Subject: Re: [DOM3 Events/DOM4] re-dispatching trusted events with initEvent

On Tue, Apr 24, 2012 at 2:23 PM, Olli Pettay <Olli.Pettay@helsinki.fi<mailto:Olli.Pettay@helsinki.fi>> wrote:
Yes. It should be possible to re-dispatch events. But if a script
running on a web page dispatches event, the event must become
untrusted.

What's the point of isTrusted, anyway?  You have to trust other scripts running in the same page anyway.  Does it come into play with cross-origin iframes or something?

--
Glenn Maynard

Received on Tuesday, 24 April 2012 19:56:24 UTC