html5/spec Overview.html,1.3754,1.3755

• From: Ian Hickson via cvs-syncmail <cvsmail@w3.org>
• Date: Sat, 13 Feb 2010 12:44:52 +0000
• To: public-html-commits@w3.org
• Message-Id: <E1NgHMi-0007yU-It@lionel-hutz.w3.org>

Update of /sources/public/html5/spec
In directory hutz:/tmp/cvs-serv30636

Modified Files:
	Overview.html 
Log Message:
Add an example of escaped ampersands in URLs in sandbox=''. (whatwg r4704)

Index: Overview.html
===================================================================
RCS file: /sources/public/html5/spec/Overview.html,v
retrieving revision 1.3754
retrieving revision 1.3755
diff -u -d -r1.3754 -r1.3755
--- Overview.html	13 Feb 2010 12:33:20 -0000	1.3754
+++ Overview.html	13 Feb 2010 12:44:48 -0000	1.3755
@@ -16973,7 +16973,7 @@
  </article>
  <article>
   <footer> At <time pubdate>2009-08-21T23:44Z</time>, <a href="/users/cap">cap</a> writes: </footer>
-  <iframe seamless sandbox="allow-same-origin" srcdoc="<p>Yeah, you can see it <a href="/gallery/cover/1">in my gallery</a>."></iframe>
+  <iframe seamless sandbox="allow-same-origin" srcdoc="<p>Yeah, you can see it <a href="/gallery?mode=cover&page=1">in my gallery</a>."></iframe>
  </article>
  <article>
   <footer> At <time pubdate>2009-08-21T23:58Z</time>, <a href="/users/ch">ch</a> writes: </footer>
@@ -16981,6 +16981,15 @@
 <p>you should get earl&me on the next cover."></iframe>
  &lt;/article&gt;</pre>
 
+   <p>Notice the way that quotes have to be escaped (otherwise the
+   <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute would
+   end prematurely), and the way raw ampersands (e.g. in URLs or in
+   prose) mentioned in the sandboxed content have to be
+   <em>doubly</em> escaped &mdash; once so that the ampersand is
+   preserved when originally parsing the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute, and once more
+   to prevent the ampersand from being misinterpreted when parsing the
+   sandboxed content.</p>
+
   </div><p class="note">In <a href="#syntax">the HTML syntax</a>, authors need only
   remember to use U+0022 QUOTATION MARK characters (") to wrap the
   attribute contents and then to escape all U+0022 QUOTATION MARK (")

Received on Saturday, 13 February 2010 12:44:53 UTC