W3C home > Mailing lists > Public > whatwg@whatwg.org > December 2010

[whatwg] element "img" with HTTP POST method (2)

From: Bjartur Thorlacius <svartman95@gmail.com>
Date: Sat, 11 Dec 2010 14:05:49 +0000
Message-ID: <AANLkTinQ4-W=CLOxtkYHgjr01Jzh1OxkD7em+qARM+gv@mail.gmail.com>
On 12/9/10, Philipp Serafin <phil127 at gmail.com> wrote:
> ... on second thought, maybe  it would be an even better idea to just
> define a new "submit" like input type that would submit the form as soon
> as it's fully loaded and display the POST result as an image. This would
> work better with the form metaphor and would present less security
> risks, since only very few sites allow <form> or <input> elements in
> user content.
>
> Martin Janecke's example would then look like this:
>
> <form method="post" action="http://www.forkosh.dreamhost.com/mathtex.cgi">
>  <input type="hidden" name="latexdata" value="\begin{align} (... latex
> ...) \end{align}">
>  <input type="post-image">
> </form>
>
It's still using POST and thus incorrect and harmful. See previous
considerations concerning caching, retries upon networking errors,
etc.
Received on Saturday, 11 December 2010 06:05:49 UTC

This archive was generated by hypermail 2.3.1 : Monday, 13 April 2015 23:09:02 UTC