- From: Michael Smith via cvs-syncmail <cvsmail@w3.org>
- Date: Wed, 24 Mar 2010 08:57:22 +0000
- To: public-html-commits@w3.org
Update of /sources/public/html5/spec-author-view In directory hutz:/tmp/cvs-serv21622 Modified Files: Overview.html spec.html the-iframe-element.html Log Message: Add a value for 'sandbox' that enables top-level navigation. (whatwg r4862) [updated by splitter] Index: the-iframe-element.html =================================================================== RCS file: /sources/public/html5/spec-author-view/the-iframe-element.html,v retrieving revision 1.33 retrieving revision 1.34 diff -u -d -r1.33 -r1.34 --- the-iframe-element.html 9 Mar 2010 00:37:14 -0000 1.33 +++ the-iframe-element.html 24 Mar 2010 08:57:20 -0000 1.34 @@ -417,6 +417,7 @@ any content hosted by the <code><a href="#the-iframe-element">iframe</a></code>. Its value must be an <a href="common-microsyntaxes.html#unordered-set-of-unique-space-separated-tokens">unordered set of unique space-separated tokens</a>. The allowed values are <code title="attr-iframe-sandbox-allow-same-origin"><a href="#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code>, + <code title="attr-iframe-sandbox-allow-top-navigation"><a href="#attr-iframe-sandbox-allow-top-navigation">allow-top-navigation</a></code>, <code title="attr-iframe-sandbox-allow-forms"><a href="#attr-iframe-sandbox-allow-forms">allow-forms</a></code>, and <code title="attr-iframe-sandbox-allow-scripts"><a href="#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code>. When the attribute is set, the content is treated as being from a unique @@ -424,10 +425,12 @@ prevented from targeting other <a href="browsers.html#browsing-context" title="browsing context">browsing contexts</a>, and plugins are disabled. The <code title="attr-iframe-sandbox-allow-same-origin"><a href="#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code> - keyword allows the content to be treated as being from the same origin - instead of forcing it into a unique origin, and the <code title="attr-iframe-sandbox-allow-forms"><a href="#attr-iframe-sandbox-allow-forms">allow-forms</a></code> and <code title="attr-iframe-sandbox-allow-scripts"><a href="#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> - keywords re-enable forms and scripts respectively (though scripts are - still prevented from creating popups).</p><p class="warning">Setting both the <code title="attr-iframe-sandbox-allow-scripts"><a href="#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> and + keyword allows the content to be treated as being from the same + origin instead of forcing it into a unique origin, the <code title="attr-iframe-sandbox-allow-top-navigation"><a href="#attr-iframe-sandbox-allow-top-navigation">allow-top-navigation</a></code> + keyword allows the content to <a href="#navigate">navigate</a> its + <a href="browsers.html#top-level-browsing-context">top-level browsing context</a>, and the <code title="attr-iframe-sandbox-allow-forms"><a href="#attr-iframe-sandbox-allow-forms">allow-forms</a></code> and <code title="attr-iframe-sandbox-allow-scripts"><a href="#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> + keywords re-enable forms and scripts respectively (though scripts + are still prevented from creating popups).</p><p class="warning">Setting both the <code title="attr-iframe-sandbox-allow-scripts"><a href="#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> and <code title="attr-iframe-sandbox-allow-same-origin"><a href="#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code> keywords together when the embedded page has the <a href="#same-origin">same origin</a> as the page containing the <code><a href="#the-iframe-element">iframe</a></code> allows Index: Overview.html =================================================================== RCS file: /sources/public/html5/spec-author-view/Overview.html,v retrieving revision 1.785 retrieving revision 1.786 diff -u -d -r1.785 -r1.786 --- Overview.html 23 Mar 2010 08:57:00 -0000 1.785 +++ Overview.html 24 Mar 2010 08:57:19 -0000 1.786 @@ -306,7 +306,7 @@ </dl><p>This specification is available in the following formats: <a href="spec.html">single page HTML</a>, <a href="Overview.html">multipage HTML</a>. -This is revision 1.3894. +This is revision 1.3895. </p> <p class="copyright"><a href="http://www.w3.org/Consortium/Legal/ipr-notice#Copyright">Copyright</a> © 2010 <a href="http://www.w3.org/"><abbr title="World Wide Index: spec.html =================================================================== RCS file: /sources/public/html5/spec-author-view/spec.html,v retrieving revision 1.791 retrieving revision 1.792 diff -u -d -r1.791 -r1.792 --- spec.html 23 Mar 2010 08:57:00 -0000 1.791 +++ spec.html 24 Mar 2010 08:57:19 -0000 1.792 @@ -304,7 +304,7 @@ </dl><p>This specification is available in the following formats: <a href=spec.html>single page HTML</a>, <a href=Overview.html>multipage HTML</a>. -This is revision 1.3894. +This is revision 1.3895. </p> <p class=copyright><a href=http://www.w3.org/Consortium/Legal/ipr-notice#Copyright>Copyright</a> © 2010 <a href=http://www.w3.org/><abbr title="World Wide @@ -9953,6 +9953,7 @@ any content hosted by the <code><a href=#the-iframe-element>iframe</a></code>. Its value must be an <a href=#unordered-set-of-unique-space-separated-tokens>unordered set of unique space-separated tokens</a>. The allowed values are <code title=attr-iframe-sandbox-allow-same-origin><a href=#attr-iframe-sandbox-allow-same-origin>allow-same-origin</a></code>, + <code title=attr-iframe-sandbox-allow-top-navigation><a href=#attr-iframe-sandbox-allow-top-navigation>allow-top-navigation</a></code>, <code title=attr-iframe-sandbox-allow-forms><a href=#attr-iframe-sandbox-allow-forms>allow-forms</a></code>, and <code title=attr-iframe-sandbox-allow-scripts><a href=#attr-iframe-sandbox-allow-scripts>allow-scripts</a></code>. When the attribute is set, the content is treated as being from a unique @@ -9960,10 +9961,12 @@ prevented from targeting other <a href=#browsing-context title="browsing context">browsing contexts</a>, and plugins are disabled. The <code title=attr-iframe-sandbox-allow-same-origin><a href=#attr-iframe-sandbox-allow-same-origin>allow-same-origin</a></code> - keyword allows the content to be treated as being from the same origin - instead of forcing it into a unique origin, and the <code title=attr-iframe-sandbox-allow-forms><a href=#attr-iframe-sandbox-allow-forms>allow-forms</a></code> and <code title=attr-iframe-sandbox-allow-scripts><a href=#attr-iframe-sandbox-allow-scripts>allow-scripts</a></code> - keywords re-enable forms and scripts respectively (though scripts are - still prevented from creating popups).</p><p class=warning>Setting both the <code title=attr-iframe-sandbox-allow-scripts><a href=#attr-iframe-sandbox-allow-scripts>allow-scripts</a></code> and + keyword allows the content to be treated as being from the same + origin instead of forcing it into a unique origin, the <code title=attr-iframe-sandbox-allow-top-navigation><a href=#attr-iframe-sandbox-allow-top-navigation>allow-top-navigation</a></code> + keyword allows the content to <a href=#navigate>navigate</a> its + <a href=#top-level-browsing-context>top-level browsing context</a>, and the <code title=attr-iframe-sandbox-allow-forms><a href=#attr-iframe-sandbox-allow-forms>allow-forms</a></code> and <code title=attr-iframe-sandbox-allow-scripts><a href=#attr-iframe-sandbox-allow-scripts>allow-scripts</a></code> + keywords re-enable forms and scripts respectively (though scripts + are still prevented from creating popups).</p><p class=warning>Setting both the <code title=attr-iframe-sandbox-allow-scripts><a href=#attr-iframe-sandbox-allow-scripts>allow-scripts</a></code> and <code title=attr-iframe-sandbox-allow-same-origin><a href=#attr-iframe-sandbox-allow-same-origin>allow-same-origin</a></code> keywords together when the embedded page has the <a href=#same-origin>same origin</a> as the page containing the <code><a href=#the-iframe-element>iframe</a></code> allows
Received on Wednesday, 24 March 2010 08:57:24 UTC