W3C home > Mailing lists > Public > whatwg@whatwg.org > October 2007

[whatwg] Alternate content to OBJECT should not participate in HTTP POST

From: Vlad Alexander <vlad.alexander@xhtml.com>
Date: Thu, 25 Oct 2007 15:57:20 -0400
Message-ID: <530zdgq6y6ef5rn.251020071557@pinscher>
Request for the HTML 5 forms section:

Alternate content such as form controls should not participate in the HTTP POST if the <object> can be rendered. In this example, if logo.gif can be rendered, then data from <textarea> should not be send to the server:

<object data="logo.gif" type="image/gif" width="180" height="60">
        <textarea id="abc" name="abc" rows="5" cols="70">Hello World!</textarea>
</object>

Here is a test page for the above example:
http://misc.xstandard.com/mozilla/alternate-content1.asp

This causes problems for plug-ins loaded via the <object> element. In this example, the same "name" is used for both the <object> and <textarea> elements because most CMS expect only one field to be submitted from a control.

<object name="abc" type="application/x-xstandard">
        <param name="Value" value="some text" />
        <textarea name="abc">more text</textarea>
</object>

In the above example, data is sent to the server from both the plug-in (correct) and the alternate content (incorrect).

IE and Opera support this. The HTML 5 spec should formally define this behavior.

Regards,
-Vlad
http://xhtml.com
Received on Thursday, 25 October 2007 12:57:20 UTC

This archive was generated by hypermail 2.3.1 : Monday, 13 April 2015 23:08:37 UTC