[Bug 24026] New: Document that URLs (destinationURL) should/may be validated and/or normalized

https://www.w3.org/Bugs/Public/show_bug.cgi?id=24026

            Bug ID: 24026
           Summary: Document that URLs (destinationURL) should/may be
                    validated and/or normalized
           Product: HTML WG
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Encrypted Media Extensions
          Assignee: ddorwin@google.com
          Reporter: ddorwin@google.com
        QA Contact: public-html-bugzilla@w3.org
                CC: mike@w3.org, public-html-media@w3.org

MediaKeyMessageEvent's destinationURL is currently a DOMString. There is no
mention of validating it or that it must be a valid URL.

I propose adding text that says any URLs provided by the CDM should be
validated before adding them to the event.

At a minimum, we should note that URLs may be validated and/or normalized
before they reach the application. (Some browsers use URL types internally and
these may reject invalid URLs and/or normalize URLs.)

In any case, applications should not expect exact URL matches across browsers
(unless we require normalization AND provide a reference for it).

Another option is to use the URL type instead of DOMString. There are specs
[1][2] for this, but I'm not sure of their timeline or implementation status
and there is no "URL" in Web IDL.

destinationURL is currently the only URL in the spec, but we would probably
want to apply this to any URLs that might be referenced in the spec.

[1] http://url.spec.whatwg.org/
[2] https://dvcs.w3.org/hg/url/raw-file/tip/Overview.html

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Saturday, 7 December 2013 00:35:55 UTC