[SVGMobile12] A.7.19 getURL and postURL

• From: Jonathan Watt <jwatt@jwatt.org>
• Date: Fri, 27 Jan 2006 15:26:32 +0000
• To: www-svg@w3.org
• Message-ID: <43DA3BA8.80808@jwatt.org>

Dear SVG WG,

http://www.w3.org/TR/SVGMobile12/svgudom.html#svg::SVGGlobal_getURL in section 
A.7.19 says:

   For security reasons, User Agents are encouraged to restrict the
   domains to which one may make such requests. When enforcing such
   restrictions, the callback is called immedately with its
   AsyncURLStatus object's success field set to false and other
   fields set to null.

Please change "are encouraged to" to at least "should".

The phrase "restrict the domains" is too vague. Please change this to "restrict 
requests to the same origin as the SVG document".

Please also make the text regarding security restrictions a separate paragraph, 
perhaps with some sort of highlighting.

Oh, and "immedately" isn't a word.

Regards,
Jonathan

Received on Friday, 27 January 2006 15:26:59 UTC