[Bug 20789] Signature (cryptographic hash) attribute for <script>

https://www.w3.org/Bugs/Public/show_bug.cgi?id=20789

--- Comment #1 from Victor Costan <costan@gmail.com> ---
I forgot to talk about failure modes.


* Failure Modes

If the signature attribute's value does not match the syntax in this
specification, or if the algorithm-id is not supported by the user agent, the
signature attribute should be ignored. The user agent can optionally log a
warning to its console.

If the hash-value in the signature attribute value does not match the value
computed for the fetched script, the user agent shall consider that the fetch
resulted in a network error. Most importantly, the user agent shall not execute
the script.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Monday, 28 January 2013 02:42:06 UTC