W3C home > Mailing lists > Public > www-svg@w3.org > January 2006

[SVGMobile12] A.7.19 getURL and postURL

From: Jonathan Watt <jwatt@jwatt.org>
Date: Fri, 27 Jan 2006 15:26:32 +0000
Message-ID: <43DA3BA8.80808@jwatt.org>
To: www-svg@w3.org

Dear SVG WG,

http://www.w3.org/TR/SVGMobile12/svgudom.html#svg::SVGGlobal_getURL in section 
A.7.19 says:

   For security reasons, User Agents are encouraged to restrict the
   domains to which one may make such requests. When enforcing such
   restrictions, the callback is called immedately with its
   AsyncURLStatus object's success field set to false and other
   fields set to null.

Please change "are encouraged to" to at least "should".

The phrase "restrict the domains" is too vague. Please change this to "restrict 
requests to the same origin as the SVG document".

Please also make the text regarding security restrictions a separate paragraph, 
perhaps with some sort of highlighting.

Oh, and "immedately" isn't a word.

Received on Friday, 27 January 2006 15:26:59 UTC

This archive was generated by hypermail 2.3.1 : Wednesday, 8 March 2017 09:47:06 UTC