[Bug 9602] That autofocus attribute will wreak security havok. What an ignorant idea to bring more logic to HTML. I think I know a couple of ways to abuse it, since it actually is some sort of flow control, which only scripting languages should be capable of. I hope from bugzilla@jessica.w3.org on 2010-08-04 (public-html-bugzilla@w3.org from August 2010)

From: <bugzilla@jessica.w3.org>
Date: Wed, 04 Aug 2010 06:38:49 +0000
To: public-html-bugzilla@w3.org
Message-Id: <E1OgXcn-00056A-Df@jessica.w3.org>

http://www.w3.org/Bugs/Public/show_bug.cgi?id=9602


Anne <annevk@opera.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |annevk@opera.com




--- Comment #7 from Anne <annevk@opera.com>  2010-08-04 06:38:45 ---
So maybe the solution here is to say that autofocus should not work when
scripting is disabled?

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Wednesday, 4 August 2010 06:38:51 UTC