[Bug 8999] New: Change the .cookie API to be based on the actual Origin of the document (vs its URL) and not on the sandboxed origin flag, so that text/html-sandboxed is handled as well. (But beware that data: URLs still have to fail silent, not throw SECURITY_ERR.)

http://www.w3.org/Bugs/Public/show_bug.cgi?id=8999

           Summary: Change the .cookie API to be based on the actual Origin
                    of the document (vs its URL) and not on the sandboxed
                    origin flag, so that text/html-sandboxed is handled as
                    well. (But beware that data: URLs still have to fail
                    silent, not throw SECURITY_ERR.)
           Product: HTML WG
           Version: unspecified
          Platform: Other
               URL: http://www.whatwg.org/specs/web-apps/current-
                    work/#sandboxCookies
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P3
         Component: HTML5 spec bugs
        AssignedTo: dave.null@w3.org
        ReportedBy: contributor@whatwg.org
         QAContact: public-html-bugzilla@w3.org
                CC: ian@hixie.ch, mike@w3.org, public-html@w3.org


Section: http://www.whatwg.org/specs/web-apps/current-work/#sandboxCookies

Comment:
Change the .cookie API to be based on the actual Origin of the document (vs
its URL) and not on the sandboxed origin flag, so that text/html-sandboxed is
handled as well. (But beware that data: URLs still have to fail silent, not
throw SECURITY_ERR.)

Posted from: 98.248.33.53 by ian@hixie.ch


-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Sunday, 14 February 2010 13:50:48 UTC