W3C home > Mailing lists > Public > www-style@w3.org > January 2003

Re: Another view (sorry) on XBL and behaviours

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Tue, 07 Jan 2003 22:18:09 -0500
Message-Id: <200301080318.WAA17489@nerd-xing.mit.edu>
To: Ian Hickson <ian@hixie.ch>
cc: Andrew Clover <and@doxdesk.com>, "www-style@w3.org" <www-style@w3.org>, Bert Bos <Bert.Bos@sophia.inria.fr>

> > Yes, however in this case the SVG script will have no access to the
> > object model of the parent document. (I *hope* this is actually
> > true, anyway, or users are in trouble...)
> 
> From the "window" object you can get to pretty much anything.

Per the DOM spec, yes.  In practice, sane UAs do same-origin checks and throw
security exceptions (so if I link to an SVG background on another site that
background can't access my DOM).

Boris
-- 
Computer, n: 
   A device to speed up and automate errors
Received on Tuesday, 7 January 2003 22:18:24 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 27 April 2009 13:54:19 GMT