- From: Sam Ruby via cvs-syncmail <cvsmail@w3.org>
- Date: Sun, 14 Oct 2012 12:14:48 +0000
- To: public-html-commits@w3.org
Update of /sources/public/html5/spec In directory hutz:/tmp/cvs-serv25242 Modified Files: global-attributes.html headings-and-sections.html infrastructure.html media-elements.html single-page.html spec.html states-of-the-type-attribute.html textFieldSelection.html the-article-element.html the-aside-element.html the-body-element.html the-canvas-element.html the-html-element.html the-iframe-element.html the-img-element.html the-input-element.html the-meta-element.html the-nav-element.html the-script-element.html the-section-element.html urls.html wai-aria.html Log Message: commit 5696cbb8ca80aae554904523d9e23dab6b091fbd Author: Silvia Pfeiffer <silviapfeiffer1@gmail.com> Date: Sun Oct 14 23:07:21 2012 +1100 Revert "[e] (0) update link to bug" This reverts commit f240ca9c34c474a47a54a21e7efb81bfa2dad76c. It links back to the W3C bug instead of the WHATWG bug. Index: infrastructure.html =================================================================== RCS file: /sources/public/html5/spec/infrastructure.html,v retrieving revision 1.1333 retrieving revision 1.1334 diff -u -d -r1.1333 -r1.1334 --- infrastructure.html 14 Oct 2012 09:45:07 -0000 1.1333 +++ infrastructure.html 14 Oct 2012 12:14:44 -0000 1.1334 @@ -1472,6 +1472,9 @@ scripting language, and HTTP as the network protocol, and several features assume that those languages and protocols are in use.</p> + <p>A user agent that implements the HTTP protocol must implement the Web Origin Concept + specification and the HTTP State Management Mechanism specification (Cookies) as well. <a href="textFieldSelection.html#refsHTTP">[HTTP]</a> <a href="textFieldSelection.html#refsORIGIN">[ORIGIN]</a> <a href="textFieldSelection.html#refsCOOKIES">[COOKIES]</a></p> + <p class="note">This specification might have certain additional requirements on character encodings, image formats, audio formats, and video formats in the respective sections.</p> Index: the-img-element.html =================================================================== RCS file: /sources/public/html5/spec/the-img-element.html,v retrieving revision 1.204 retrieving revision 1.205 diff -u -d -r1.204 -r1.205 --- the-img-element.html 14 Oct 2012 09:45:15 -0000 1.204 +++ the-img-element.html 14 Oct 2012 12:14:45 -0000 1.205 @@ -426,7 +426,17 @@ (XML files with an SVG root element that use declarative SMIL animation), and so forth. However, these definitions preclude SVG files with script, multipage PDF files, interactive MNG files, HTML - documents, plain text documents, and so forth.</p> + documents, plain text documents, and so forth. + <a href="textFieldSelection.html#refsPNG">[PNG]</a> + <a href="textFieldSelection.html#refsGIF">[GIF]</a> + <a href="textFieldSelection.html#refsJPEG">[JPEG]</a> + <a href="textFieldSelection.html#refsPDF">[PDF]</a> + <a href="textFieldSelection.html#refsXML">[XML]</a> + <a href="textFieldSelection.html#refsAPNG">[APNG]</a> + <!-- <a href="#refsAGIF">[AGIF]</a> --> + <a href="textFieldSelection.html#refsSVG">[SVG]</a> + <a href="textFieldSelection.html#refsMNG">[MNG]</a> + </p> <p>The <code><a href="#the-img-element">img</a></code> element must not be used as a layout tool. In particular, <code><a href="#the-img-element">img</a></code> elements should not be used to Index: the-canvas-element.html =================================================================== RCS file: /sources/public/html5/spec/the-canvas-element.html,v retrieving revision 1.1126 retrieving revision 1.1127 diff -u -d -r1.1126 -r1.1127 --- the-canvas-element.html 14 Oct 2012 09:45:14 -0000 1.1126 +++ the-canvas-element.html 14 Oct 2012 12:14:45 -0000 1.1127 @@ -349,8 +349,8 @@ <dd>Where <a href="content-models.html#embedded-content-2">embedded content</a> is expected.</dd> <dt><a href="element-definitions.html#element-dfn-content-model" title="element-dfn-content-model">Content model</a>:</dt> <dd><a href="content-models.html#transparent">Transparent</a><!-- ---><!--FORK--><!-- --->.</dd> <!-- and maybe <select>, I guess? I've left it our for now, since I guess authors might make accessible selects if they're simple enough, and it's not obvious how to distinguish the simple ones from the complex ones... --> +---><!--FORK--><!-- +--->.</dd> <!-- and maybe <select>, I guess? I've left it our for now, since I guess authors might make accessible selects if they're simple enough, and it's not obvious how to distinguish the simple ones from the complex ones... --> <dt><a href="element-definitions.html#element-dfn-attributes" title="element-dfn-attributes">Content attributes</a>:</dt> <dd><a href="global-attributes.html#global-attributes">Global attributes</a></dd> <dd><code title="attr-canvas-width"><a href="#attr-canvas-width">width</a></code></dd> @@ -506,11 +506,7 @@ that element. When created, a <code><a href="#the-canvas-element">canvas</a></code> element must not have a <a href="#primary-context">primary context</a>.</p> -<!--2DCONTEXT--> - <p>The most commonly used primary context is the <a href="http://dev.w3.org/html5/2dcontext/">HTML Canvas 2D Context</a>. -<!--2DCONTEXT--> - - </p><p>The <dfn id="dom-canvas-getcontext" title="dom-canvas-getContext"><code>getContext(<var title="">contextId</var>, <var title="">arguments...</var>)</code></dfn> method of the + <p>The <dfn id="dom-canvas-getcontext" title="dom-canvas-getContext"><code>getContext(<var title="">contextId</var>, <var title="">arguments...</var>)</code></dfn> method of the <code><a href="#the-canvas-element">canvas</a></code> element, when invoked, must run the following steps:</p> @@ -749,7 +745,6 @@ </div> <!--REMOVE-TOPIC:DOM APIs--> - <!--2DCONTEXT--> <div class="impl"> Index: the-iframe-element.html =================================================================== RCS file: /sources/public/html5/spec/the-iframe-element.html,v retrieving revision 1.348 retrieving revision 1.349 diff -u -d -r1.348 -r1.349 --- the-iframe-element.html 14 Oct 2012 09:45:15 -0000 1.348 +++ the-iframe-element.html 14 Oct 2012 12:14:45 -0000 1.349 @@ -372,108 +372,131 @@ readonly attribute <a href="textFieldSelection.html#windowproxy">WindowProxy</a>? <a href="#dom-iframe-contentwindow" title="dom-iframe-contentWindow">contentWindow</a>; };</pre> </dd> - </dl><!--TOPIC:HTML--><p>The <code><a href="#the-iframe-element">iframe</a></code> element <a href="textFieldSelection.html#represents">represents</a> a - <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a>.</p> + </dl><!--TOPIC:HTML--><!-- INTRO --><p>The <code><a href="#the-iframe-element">iframe</a></code> element <a href="textFieldSelection.html#represents">represents</a> a <a href="textFieldSelection.html#nested-browsing-context">nested browsing + context</a>.</p> - <p>The <dfn id="attr-iframe-src" title="attr-iframe-src"><code>src</code></dfn> attribute - gives the address of a page that the <a href="textFieldSelection.html#nested-browsing-context">nested browsing - context</a> is to contain. The attribute, if present, must be a - <a href="urls.html#valid-non-empty-url-potentially-surrounded-by-spaces">valid non-empty URL potentially surrounded by - spaces</a>.</p> -<!--MD--> + <!-- SRC/SRCDOC --> - <p>The <dfn id="attr-iframe-srcdoc" title="attr-iframe-srcdoc"><code>srcdoc</code></dfn> - attribute gives the content of the page that the <a href="textFieldSelection.html#nested-browsing-context">nested - browsing context</a> is to contain. The value of the attribute is - the source of <dfn id="an-iframe-srcdoc-document">an <code>iframe</code> <code title="attr-iframe-srcdoc">srcdoc</code> document</dfn>.</p> + <p>The <dfn id="attr-iframe-src" title="attr-iframe-src"><code>src</code></dfn> attribute gives the address of a page + that the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> is to contain. The attribute, if present, must be a + <a href="urls.html#valid-non-empty-url-potentially-surrounded-by-spaces">valid non-empty URL potentially surrounded by spaces</a>. If the <code title="attr-itemprop">itemprop</code> is specified on an <code><a href="#the-iframe-element">iframe</a></code> element, then the + <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute must also be specified.</p> - <p>For <code><a href="#the-iframe-element">iframe</a></code> elements in <a href="infrastructure.html#html-documents">HTML documents</a>, - the attribute, if present, must have a value using <a href="textFieldSelection.html#syntax">the HTML - syntax</a> that consists of the following syntactic components, - in the given order:</p> + <p>The <dfn id="attr-iframe-srcdoc" title="attr-iframe-srcdoc"><code>srcdoc</code></dfn> attribute gives the content of + the page that the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> is to contain. The value of the attribute + is the source of <dfn id="an-iframe-srcdoc-document">an <code>iframe</code> <code title="attr-iframe-srcdoc">srcdoc</code> + document</dfn>.</p> - <ol><li>Any number of <a href="textFieldSelection.html#syntax-comments" title="syntax-comments">comments</a> and - <a href="common-microsyntaxes.html#space-character" title="space character">space characters</a>.</li> + <p>For <code><a href="#the-iframe-element">iframe</a></code> elements in <a href="infrastructure.html#html-documents">HTML documents</a>, the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute, if present, must have a value using <a href="textFieldSelection.html#syntax">the + HTML syntax</a> that consists of the following syntactic components, in the given order:</p> + + <ol><li>Any number of <a href="textFieldSelection.html#syntax-comments" title="syntax-comments">comments</a> and <a href="common-microsyntaxes.html#space-character" title="space + character">space characters</a>.</li> <li>Optionally, a <a href="textFieldSelection.html#syntax-doctype" title="syntax-doctype">DOCTYPE</a>. - </li><li>Any number of <a href="textFieldSelection.html#syntax-comments" title="syntax-comments">comments</a> and - <a href="common-microsyntaxes.html#space-character" title="space character">space characters</a>.</li> + </li><li>Any number of <a href="textFieldSelection.html#syntax-comments" title="syntax-comments">comments</a> and <a href="common-microsyntaxes.html#space-character" title="space + character">space characters</a>.</li> <li>The root element, in the form of an <code><a href="the-html-element.html#the-html-element">html</a></code> <a href="textFieldSelection.html#syntax-elements" title="syntax-elements">element</a>.</li> - <li>Any number of <a href="textFieldSelection.html#syntax-comments" title="syntax-comments">comments</a> and - <a href="common-microsyntaxes.html#space-character" title="space character">space characters</a>.</li> + <li>Any number of <a href="textFieldSelection.html#syntax-comments" title="syntax-comments">comments</a> and <a href="common-microsyntaxes.html#space-character" title="space + character">space characters</a>.</li> - </ol><p>For <code><a href="#the-iframe-element">iframe</a></code> elements in <a href="infrastructure.html#xml-documents">XML documents</a>, - the attribute, if present, must have a value that matches the - production labeled <code title="">document</code> in the XML - specification. <a href="textFieldSelection.html#refsXML">[XML]</a></p> + </ol><p>For <code><a href="#the-iframe-element">iframe</a></code> elements in <a href="infrastructure.html#xml-documents">XML documents</a>, the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute, if present, must have a value that matches the + production labeled <code title="">document</code> in the XML specification. <a href="textFieldSelection.html#refsXML">[XML]</a></p> + + <div class="example"> + + <p>Here a blog uses the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute in conjunction + with the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> and <code title="attr-iframe-seamless"><a href="#attr-iframe-seamless">seamless</a></code> attributes described below to provide users of user + agents that support this feature with an extra layer of protection from script injection in the + blog post comments:</p> + + <pre><article> + <h1>I got my own magazine!</h1> + <p>After much effort, I've finally found a publisher, and so now I + have my own magazine! Isn't that awesome?! The first issue will come + out in September, and we have articles about getting food, and about + getting in boxes, it's going to be great!</p> + <footer> + <p>Written by <a href="/users/cap">cap</a>, 1 hour ago. + </footer> + <article> + <footer> Thirteen minutes ago, <a href="/users/ch">ch</a> wrote: </footer> + <iframe seamless sandbox srcdoc="<p>did you get a cover picture yet?"></iframe> + </article> + <article> + <footer> Nine minutes ago, <a href="/users/cap">cap</a> wrote: </footer> + <iframe seamless sandbox srcdoc="<p>Yeah, you can see it <a href=&quot;/gallery?mode=cover&amp;amp;page=1&quot;>in my gallery</a>."></iframe> + </article> + <article> + <footer> Five minutes ago, <a href="/users/ch">ch</a> wrote: </footer> + <iframe seamless sandbox srcdoc="<p>hey that's earl's table. +<p>you should get earl&amp;amp;me on the next cover."></iframe> + </article></pre> + + <p>Notice the way that quotes have to be escaped (otherwise the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute would end prematurely), and the way raw + ampersands (e.g. in URLs or in prose) mentioned in the sandboxed content have to be + <em>doubly</em> escaped — once so that the ampersand is preserved when originally parsing + the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute, and once more to prevent the + ampersand from being misinterpreted when parsing the sandboxed content.</p> + + </div> + + <p class="note">In <a href="textFieldSelection.html#syntax">the HTML syntax</a>, authors need only remember to use """ (U+0022) characters to wrap the attribute contents and then to escape all """ (U+0022) and U+0026 AMPERSAND (&) characters, and to specify the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute, to ensure safe embedding of content.</p> + + <p class="note">Due to restrictions of <a href="textFieldSelection.html#the-xhtml-syntax">the XHTML syntax</a>, in XML the U+003C LESS-THAN + SIGN character (<) needs to be escaped as well. In order to prevent <a href="http://www.w3.org/TR/REC-xml/#AVNormalize">attribute-value normalization</a>, some of XML's + whitespace characters — specifically "tab" (U+0009), "LF" (U+000A), and "CR" (U+000D) — also need to be escaped. <a href="textFieldSelection.html#refsXML">[XML]</a></p> + + <p class="note">If the <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute and the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute are both specified together, the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute takes priority. This allows authors to provide + a fallback <a href="urls.html#url">URL</a> for legacy user agents that do not support the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute.</p> - <p>If the <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute and the - <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute are both - specified together, the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> - attribute takes priority. This allows authors to provide a fallback - <a href="urls.html#url">URL</a> for legacy user agents that do not support the - <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute.</p> <div class="impl"> - <p>When an <code><a href="#the-iframe-element">iframe</a></code> element is <a href="infrastructure.html#insert-an-element-into-a-document" title="insert an - element into a document">inserted into a document</a>, the user - agent must create a <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a>, and then - <a href="#process-the-iframe-attributes">process the <code>iframe</code> attributes</a> for the - first time.</p> + <hr><!-- SRC/SRCDOC PROCESSING MODEL --><p>When an <code><a href="#the-iframe-element">iframe</a></code> element is <a href="infrastructure.html#insert-an-element-into-a-document" title="insert an element into a document">inserted + into a document</a>, the user agent must create a <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a>, and + then <a href="#process-the-iframe-attributes">process the <code>iframe</code> attributes</a> for the first time.</p> - <p>When an <code><a href="#the-iframe-element">iframe</a></code> element is <a href="infrastructure.html#remove-an-element-from-a-document" title="remove an - element from a document">removed from a document</a>, the user - agent must <a href="textFieldSelection.html#a-browsing-context-is-discarded" title="a browsing context is - discarded">discard</a> the <a href="textFieldSelection.html#nested-browsing-context">nested browsing - context</a>.</p> + <p>When an <code><a href="#the-iframe-element">iframe</a></code> element is <a href="infrastructure.html#remove-an-element-from-a-document" title="remove an element from a document">removed + from a document</a>, the user agent must <a href="textFieldSelection.html#a-browsing-context-is-discarded" title="a browsing context is + discarded">discard</a> the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a>.</p> - <p class="note">This happens without any <code title="event-unload">unload</code> events firing (the <a href="textFieldSelection.html#nested-browsing-context">nested - browsing context</a> and its <code><a href="dom.html#document">Document</a></code> are <em title="a browsing context is discarded"><a href="textFieldSelection.html#a-browsing-context-is-discarded">discarded</a></em>, not <em title="unload a document"><a href="textFieldSelection.html#unload-a-document">unloaded</a></em>).</p> + <p class="note">This happens without any <code title="event-unload">unload</code> events firing + (the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> and its <code><a href="dom.html#document">Document</a></code> are <em title="a browsing + context is discarded"><a href="textFieldSelection.html#a-browsing-context-is-discarded">discarded</a></em>, not <em title="unload a document"><a href="textFieldSelection.html#unload-a-document">unloaded</a></em>).</p> <!-- START of section that's very similar to <frame> --> - <p>Whenever an <code><a href="#the-iframe-element">iframe</a></code> element with a <a href="textFieldSelection.html#nested-browsing-context">nested - browsing context</a> has its <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute set, changed, or - removed, the user agent must <a href="#process-the-iframe-attributes">process the <code>iframe</code> - attributes</a>.</p> + <p>Whenever an <code><a href="#the-iframe-element">iframe</a></code> element with a <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> has its + <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute set, changed, or removed, the user agent + must <a href="#process-the-iframe-attributes">process the <code>iframe</code> attributes</a>.</p> - <p>Similarly, whenever an <code><a href="#the-iframe-element">iframe</a></code> element with a - <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> but with no <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute specified has its - <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute set, changed, or - removed, the user agent must <a href="#process-the-iframe-attributes">process the <code>iframe</code> - attributes</a>.</p> <!-- It doesn't happen when the base URL is - changed, though. --> + <p>Similarly, whenever an <code><a href="#the-iframe-element">iframe</a></code> element with a <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> + but with no <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute specified has its <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute set, changed, or removed, the user agent must + <a href="#process-the-iframe-attributes">process the <code>iframe</code> attributes</a>.</p> <!-- It doesn't happen when the base + URL is changed, though. --> - <p>When the user agent is to <dfn id="process-the-iframe-attributes">process the <code>iframe</code> - attributes</dfn>, it must run the first appropriate steps from the - following list:</p> + <p>When the user agent is to <dfn id="process-the-iframe-attributes">process the <code>iframe</code> attributes</dfn>, it must run + the first appropriate steps from the following list:</p> - <dl class="switch"><dt>If the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute - is specified</dt> + <dl class="switch"><dt>If the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute is specified</dt> - <dd><p><a href="textFieldSelection.html#navigate">Navigate</a><!--DONAV iframe--> the element's - <a href="textFieldSelection.html#child-browsing-context">child browsing context</a> to a resource whose - <a href="urls.html#content-type">Content-Type</a> is <code><a href="textFieldSelection.html#text/html">text/html</a></code>, whose - <a href="urls.html#url">URL</a> is <code><a href="urls.html#about:srcdoc">about:srcdoc</a></code>, and whose data - consists of the value of the attribute. The resulting - <code><a href="dom.html#document">Document</a></code> must be considered <a href="#an-iframe-srcdoc-document">an - <code>iframe</code> <code title="attr-iframe-srcdoc">srcdoc</code> - document</a>.</p></dd> + <dd><p><a href="textFieldSelection.html#navigate">Navigate</a><!--DONAV iframe--> the element's <a href="textFieldSelection.html#child-browsing-context">child browsing context</a> + to a resource whose <a href="urls.html#content-type">Content-Type</a> is <code><a href="textFieldSelection.html#text/html">text/html</a></code>, whose <a href="urls.html#url">URL</a> + is <code><a href="urls.html#about:srcdoc">about:srcdoc</a></code>, and whose data consists of the value of the attribute. The + resulting <code><a href="dom.html#document">Document</a></code> must be considered <a href="#an-iframe-srcdoc-document">an <code>iframe</code> <code title="attr-iframe-srcdoc">srcdoc</code> document</a>.</p></dd> - <dt>Otherwise, if the element has no <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute specified, and the - user agent is processing the <code><a href="#the-iframe-element">iframe</a></code>'s attributes for - the first time</dt> + <dt>Otherwise, if the element has no <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute + specified, and the user agent is processing the <code><a href="#the-iframe-element">iframe</a></code>'s attributes for the first + time</dt> <dd> - <p><a href="textFieldSelection.html#queue-a-task">Queue a task</a> to <a href="textFieldSelection.html#fire-a-simple-event">fire a simple event</a> - named <code title="event-load">load</code> at the - <code><a href="#the-iframe-element">iframe</a></code> element.</p> + <p><a href="textFieldSelection.html#queue-a-task">Queue a task</a> to <a href="textFieldSelection.html#fire-a-simple-event">fire a simple event</a> named <code title="event-load">load</code> at the <code><a href="#the-iframe-element">iframe</a></code> element.</p> </dd> @@ -483,205 +506,117 @@ <ol><li> - <p>If the value of the <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> - attribute is the empty string, let <var title="">url</var> be - the string "<code><a href="urls.html#about:blank">about:blank</a></code>".</p> + <p>If the value of the <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute is the empty string, + let <var title="">url</var> be the string "<code><a href="urls.html#about:blank">about:blank</a></code>".</p> - <p>Otherwise, <a href="urls.html#resolve-a-url" title="resolve a url">resolve</a> the - value of the <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute, - relative to the <code><a href="#the-iframe-element">iframe</a></code> element.</p> + <p>Otherwise, <a href="urls.html#resolve-a-url" title="resolve a url">resolve</a> the value of the <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute, relative to the <code><a href="#the-iframe-element">iframe</a></code> element.</p> - <p>If that is not successful, then let <var title="">url</var> - be the string "<code><a href="urls.html#about:blank">about:blank</a></code>". Otherwise, let <var title="">url</var> be the resulting <a href="urls.html#absolute-url">absolute - URL</a>.</p> + <p>If that is not successful, then let <var title="">url</var> be the string + "<code><a href="urls.html#about:blank">about:blank</a></code>". Otherwise, let <var title="">url</var> be the resulting + <a href="urls.html#absolute-url">absolute URL</a>.</p> </li> <li> - <p><a href="textFieldSelection.html#navigate">Navigate</a><!--DONAV iframe--> the element's - <a href="textFieldSelection.html#child-browsing-context">child browsing context</a> to <var title="">url</var>.</p> + <p><a href="textFieldSelection.html#navigate">Navigate</a><!--DONAV iframe--> the element's <a href="textFieldSelection.html#child-browsing-context">child browsing context</a> + to <var title="">url</var>.</p> </li> </ol></dd> - </dl><p>Any <a href="textFieldSelection.html#navigate" title="navigate">navigation</a> required of the user - agent in the <a href="#process-the-iframe-attributes">process the <code>iframe</code> attributes</a> - algorithm must be completed as an <a href="textFieldSelection.html#explicit-self-navigation-override">explicit self-navigation - override</a> and with the <code><a href="#the-iframe-element">iframe</a></code> element's - document's <a href="textFieldSelection.html#browsing-context">browsing context</a> as the <a href="textFieldSelection.html#source-browsing-context">source - browsing context</a>.</p> + </dl><p>Any <a href="textFieldSelection.html#navigate" title="navigate">navigation</a> required of the user agent in the <a href="#process-the-iframe-attributes">process + the <code>iframe</code> attributes</a> algorithm must be completed as an <a href="textFieldSelection.html#explicit-self-navigation-override">explicit + self-navigation override</a> and with the <code><a href="#the-iframe-element">iframe</a></code> element's document's + <a href="textFieldSelection.html#browsing-context">browsing context</a> as the <a href="textFieldSelection.html#source-browsing-context">source browsing context</a>.</p> - <p>Furthermore, if the <a href="textFieldSelection.html#active-document">active document</a> of the element's - <a href="textFieldSelection.html#child-browsing-context">child browsing context</a> before such a <a href="textFieldSelection.html#navigate" title="navigate">navigation</a> was not <a href="textFieldSelection.html#completely-loaded">completely - loaded</a> at the time of the new <a href="textFieldSelection.html#navigate" title="navigate">navigation</a>, then the <a href="textFieldSelection.html#navigate" title="navigate">navigation</a> must be completed with - <a href="textFieldSelection.html#replacement-enabled">replacement enabled</a>.</p> + <p>Furthermore, if the <a href="textFieldSelection.html#active-document">active document</a> of the element's <a href="textFieldSelection.html#child-browsing-context">child browsing + context</a> before such a <a href="textFieldSelection.html#navigate" title="navigate">navigation</a> was not <a href="textFieldSelection.html#completely-loaded">completely + loaded</a> at the time of the new <a href="textFieldSelection.html#navigate" title="navigate">navigation</a>, then the <a href="textFieldSelection.html#navigate" title="navigate">navigation</a> must be completed with <a href="textFieldSelection.html#replacement-enabled">replacement enabled</a>.</p> - <p>Similarly, if the <a href="textFieldSelection.html#child-browsing-context">child browsing context</a>'s - <a href="textFieldSelection.html#session-history">session history</a> contained only one - <code><a href="dom.html#document">Document</a></code> when the <a href="#process-the-iframe-attributes">process the <code>iframe</code> - attributes</a> algorithm was invoked, and that was the - <code><a href="urls.html#about:blank">about:blank</a></code> <code><a href="dom.html#document">Document</a></code> created when the - <a href="textFieldSelection.html#child-browsing-context">child browsing context</a> was created, then any <a href="textFieldSelection.html#navigate" title="navigate">navigation</a> required of the user agent in - that algorithm must be completed with <a href="textFieldSelection.html#replacement-enabled">replacement - enabled</a>.</p> <!-- see also the note near similar text for the + <p>Similarly, if the <a href="textFieldSelection.html#child-browsing-context">child browsing context</a>'s <a href="textFieldSelection.html#session-history">session history</a> contained + only one <code><a href="dom.html#document">Document</a></code> when the <a href="#process-the-iframe-attributes">process the <code>iframe</code> attributes</a> + algorithm was invoked, and that was the <code><a href="urls.html#about:blank">about:blank</a></code> <code><a href="dom.html#document">Document</a></code> created + when the <a href="textFieldSelection.html#child-browsing-context">child browsing context</a> was created, then any <a href="textFieldSelection.html#navigate" title="navigate">navigation</a> required of the user agent in that algorithm must be completed + with <a href="textFieldSelection.html#replacement-enabled">replacement enabled</a>.</p> <!-- see also the note near similar text for the location.assign() method --> - </div> - - <!-- END of section that's very similar to <frame> --> - - <p class="note">If, when the element is created, the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute is not set, and - the <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute is either - also not set or set but its value cannot be <a href="urls.html#resolve-a-url" title="resolve a - url">resolved</a>, the browsing context will remain at the - initial <code><a href="urls.html#about:blank">about:blank</a></code> page.</p> - - <p class="note">If the user <a href="textFieldSelection.html#navigate" title="navigate">navigates</a> - away from this page, the <code><a href="#the-iframe-element">iframe</a></code>'s corresponding - <code><a href="textFieldSelection.html#windowproxy">WindowProxy</a></code> object will proxy new <code><a href="textFieldSelection.html#window">Window</a></code> - objects for new <code><a href="dom.html#document">Document</a></code> objects, but the <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute will not change.</p> + <p>When a <code><a href="dom.html#document">Document</a></code> in an <code><a href="#the-iframe-element">iframe</a></code> is marked as <a href="textFieldSelection.html#completely-loaded">completely + loaded</a>, the user agent must synchronously <a href="textFieldSelection.html#fire-a-simple-event">fire a simple event</a> named <code title="event-load">load</code> at the <code><a href="#the-iframe-element">iframe</a></code> element. When content whose + <a href="urls.html#url">URL</a> has the <a href="textFieldSelection.html#same-origin">same origin</a> as the <code><a href="#the-iframe-element">iframe</a></code> element's + <code><a href="dom.html#document">Document</a></code> fails to load (e.g. due to a DNS error, network error, or if the server + returned a 4xx or 5xx status code <a href="urls.html#concept-http-equivalent-codes" title="concept-http-equivalent-codes">or + equivalent</a>), then the user agent must <a href="textFieldSelection.html#queue-a-task">queue a task</a> to <a href="textFieldSelection.html#fire-a-simple-event">fire a simple + event</a> named <code title="event-error">error</code> at the element instead. (This event does + not fire for <a href="textFieldSelection.html#parse-error" title="parse error">parse errors</a>, script errors, or any errors for + cross-origin resources.)</p> - <div class="example"> + <p>The <a href="textFieldSelection.html#task-source">task source</a> for these <a href="textFieldSelection.html#concept-task" title="concept-task">tasks</a> is the <a href="textFieldSelection.html#dom-manipulation-task-source">DOM + manipulation task source</a>.</p> - <p>Here a blog uses the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute in conjunction - with the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> and <code title="attr-iframe-seamless"><a href="#attr-iframe-seamless">seamless</a></code> attributes described - below to provide users of user agents that support this feature - with an extra layer of protection from script injection in the blog - post comments:</p> + <p class="note">A <code title="event-load">load</code> event is also fired at the + <code><a href="#the-iframe-element">iframe</a></code> element when it is created if no other data is loaded in it.</p> - <pre><article> - <h1>I got my own magazine!</h1> - <p>After much effort, I've finally found a publisher, and so now I - have my own magazine! Isn't that awesome?! The first issue will come - out in September, and we have articles about getting food, and about - getting in boxes, it's going to be great!</p> - <footer> - <p>Written by <a href="/users/cap">cap</a>, 1 hour ago. - </footer> - <article> - <footer> Thirteen minutes ago, <a href="/users/ch">ch</a> wrote: </footer> - <iframe seamless sandbox srcdoc="<p>did you get a cover picture yet?"></iframe> - </article> - <article> - <footer> Nine minutes ago, <a href="/users/cap">cap</a> wrote: </footer> - <iframe seamless sandbox srcdoc="<p>Yeah, you can see it <a href=&quot;/gallery?mode=cover&amp;amp;page=1&quot;>in my gallery</a>."></iframe> - </article> - <article> - <footer> Five minutes ago, <a href="/users/ch">ch</a> wrote: </footer> - <iframe seamless sandbox srcdoc="<p>hey that's earl's table. -<p>you should get earl&amp;amp;me on the next cover."></iframe> - </article></pre> + <p>When the <code><a href="#the-iframe-element">iframe</a></code>'s <a href="textFieldSelection.html#active-document">active document</a> is not <a href="textFieldSelection.html#ready-for-post-load-tasks">ready for post-load + tasks</a>, and when anything in the <code><a href="#the-iframe-element">iframe</a></code> is <a href="textFieldSelection.html#delay-the-load-event" title="delay the load + event">delaying the load event</a> of the <code><a href="#the-iframe-element">iframe</a></code>'s <a href="textFieldSelection.html#browsing-context">browsing context</a>'s + <a href="textFieldSelection.html#active-document">active document</a>, the <code><a href="#the-iframe-element">iframe</a></code> must <a href="textFieldSelection.html#delay-the-load-event">delay the load event</a> of + its document.</p> - <p>Notice the way that quotes have to be escaped (otherwise the - <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute would end - prematurely), and the way raw ampersands (e.g. in URLs or in prose) - mentioned in the sandboxed content have to be <em>doubly</em> - escaped — once so that the ampersand is preserved when - originally parsing the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute, and once more - to prevent the ampersand from being misinterpreted when parsing the - sandboxed content.</p> + <p class="note">If, during the handling of the <code title="event-load">load</code> event, the + <a href="textFieldSelection.html#browsing-context">browsing context</a> in the <code><a href="#the-iframe-element">iframe</a></code> is again <a href="textFieldSelection.html#navigate" title="navigate">navigated</a>, that will further <a href="textFieldSelection.html#delay-the-load-event">delay the load event</a>.</p> </div> - <p class="note">In <a href="textFieldSelection.html#syntax">the HTML syntax</a>, authors need only - remember to use """ (U+0022) characters to wrap the - attribute contents and then to escape all """ (U+0022) - and U+0026 AMPERSAND (&) characters, and to specify the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute, to ensure safe - embedding of content.</p> - - <p class="note">Due to restrictions of <a href="textFieldSelection.html#the-xhtml-syntax">the XHTML - syntax</a>, in XML the U+003C LESS-THAN SIGN character (<) - needs to be escaped as well. In order to prevent <a href="http://www.w3.org/TR/REC-xml/#AVNormalize">attribute-value - normalization</a>, some of XML's whitespace characters — - specifically "tab" (U+0009), "LF" (U+000A), and "CR" (U+000D) — also need to be - escaped. <a href="textFieldSelection.html#refsXML">[XML]</a></p> - - <hr><p>The <dfn id="attr-iframe-name" title="attr-iframe-name"><code>name</code></dfn> - attribute, if present, must be a <a href="textFieldSelection.html#valid-browsing-context-name">valid browsing context - name</a>. The given value is used to name the <a href="textFieldSelection.html#nested-browsing-context">nested - browsing context</a>. <span class="impl">When the browsing - context is created, if the attribute is present, the <a href="textFieldSelection.html#browsing-context-name">browsing - context name</a> must be set to the value of this attribute; - otherwise, the <a href="textFieldSelection.html#browsing-context-name">browsing context name</a> must be set to the - empty string.</span></p> - - <div class="impl"> + <!-- END of section that's very similar to <frame> --> - <p>Whenever the <code title="attr-iframe-name"><a href="#attr-iframe-name">name</a></code> attribute - is set, the nested <a href="textFieldSelection.html#browsing-context">browsing context</a>'s <a href="textFieldSelection.html#browsing-context-name" title="browsing context name">name</a> must be changed to the new - value. If the attribute is removed, the <a href="textFieldSelection.html#browsing-context-name">browsing context - name</a> must be set to the empty string.</p> + <p class="note">If, when the element is created, the <code title="attr-iframe-srcdoc"><a href="#attr-iframe-srcdoc">srcdoc</a></code> attribute is not set, and the <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute is either also not set or set but its value cannot be + <a href="urls.html#resolve-a-url" title="resolve a url">resolved</a>, the browsing context will remain at the initial + <code><a href="urls.html#about:blank">about:blank</a></code> page.</p> - <p>When content loads in an <code><a href="#the-iframe-element">iframe</a></code>, after any <code title="event-load">load</code> events are fired within the content - itself, the user agent must <a href="textFieldSelection.html#queue-a-task">queue a task</a> to <a href="textFieldSelection.html#fire-a-simple-event">fire - a simple event</a> named <code title="event-load">load</code> at - the <code><a href="#the-iframe-element">iframe</a></code> element. When content whose <a href="urls.html#url">URL</a> - has the <a href="textFieldSelection.html#same-origin">same origin</a> as the <code><a href="#the-iframe-element">iframe</a></code> - element's <code><a href="dom.html#document">Document</a></code> fails to load (e.g. due to a DNS - error, network error, or if the server returned a 4xx or 5xx status - code <a href="urls.html#concept-http-equivalent-codes" title="concept-http-equivalent-codes">or - equivalent</a>), then the user agent must <a href="textFieldSelection.html#queue-a-task">queue a - task</a> to <a href="textFieldSelection.html#fire-a-simple-event">fire a simple event</a> named <code title="event-error">error</code> at the element instead. (This event - does not fire for <a href="textFieldSelection.html#parse-error" title="parse error">parse errors</a>, - script errors, or any errors for cross-origin resources.)</p> + <p class="note">If the user <a href="textFieldSelection.html#navigate" title="navigate">navigates</a> away from this page, the + <code><a href="#the-iframe-element">iframe</a></code>'s corresponding <code><a href="textFieldSelection.html#windowproxy">WindowProxy</a></code> object will proxy new + <code><a href="textFieldSelection.html#window">Window</a></code> objects for new <code><a href="dom.html#document">Document</a></code> objects, but the <code title="attr-iframe-src"><a href="#attr-iframe-src">src</a></code> attribute will not change.</p> - <p>The <a href="textFieldSelection.html#task-source">task source</a> for these <a href="textFieldSelection.html#concept-task" title="concept-task">tasks</a> is the <a href="textFieldSelection.html#dom-manipulation-task-source">DOM manipulation - task source</a>.</p> - <p class="note">A <code title="event-load">load</code> event is also - fired at the <code><a href="#the-iframe-element">iframe</a></code> element when it is created if no - other data is loaded in it.</p> + <hr><!-- NAME --><p>The <dfn id="attr-iframe-name" title="attr-iframe-name"><code>name</code></dfn> attribute, if present, must be a + <a href="textFieldSelection.html#valid-browsing-context-name">valid browsing context name</a>. The given value is used to name the <a href="textFieldSelection.html#nested-browsing-context">nested + browsing context</a>. <span class="impl">When the browsing context is created, if the attribute + is present, the <a href="textFieldSelection.html#browsing-context-name">browsing context name</a> must be set to the value of this attribute; + otherwise, the <a href="textFieldSelection.html#browsing-context-name">browsing context name</a> must be set to the empty string.</span></p> - <p>When the <code><a href="#the-iframe-element">iframe</a></code>'s <a href="textFieldSelection.html#active-document">active document</a> is - not <a href="textFieldSelection.html#ready-for-post-load-tasks">ready for post-load tasks</a>, and when anything in the - <code><a href="#the-iframe-element">iframe</a></code> is <a href="textFieldSelection.html#delay-the-load-event" title="delay the load event">delaying - the load event</a> of the <code><a href="#the-iframe-element">iframe</a></code>'s <a href="textFieldSelection.html#browsing-context">browsing - context</a>'s <a href="textFieldSelection.html#active-document">active document</a>, the - <code><a href="#the-iframe-element">iframe</a></code> must <a href="textFieldSelection.html#delay-the-load-event">delay the load event</a> of its - document.</p> + <div class="impl"> - <p class="note">If, during the handling of the <code title="event-load">load</code> event, the <a href="textFieldSelection.html#browsing-context">browsing - context</a> in the <code><a href="#the-iframe-element">iframe</a></code> is again <a href="textFieldSelection.html#navigate" title="navigate">navigated</a>, that will further <a href="textFieldSelection.html#delay-the-load-event">delay the - load event</a>.</p> + <p>Whenever the <code title="attr-iframe-name"><a href="#attr-iframe-name">name</a></code> attribute is set, the nested + <a href="textFieldSelection.html#browsing-context">browsing context</a>'s <a href="textFieldSelection.html#browsing-context-name" title="browsing context name">name</a> must be changed to + the new value. If the attribute is removed, the <a href="textFieldSelection.html#browsing-context-name">browsing context name</a> must be set to + the empty string.</p> </div> - <hr><p>The <dfn id="attr-iframe-sandbox" title="attr-iframe-sandbox"><code>sandbox</code></dfn> - attribute, when specified, enables a set of extra restrictions on - any content hosted by the <code><a href="#the-iframe-element">iframe</a></code>. Its value must be an - <a href="common-microsyntaxes.html#unordered-set-of-unique-space-separated-tokens">unordered set of unique space-separated tokens</a> that are - <a href="infrastructure.html#ascii-case-insensitive">ASCII case-insensitive</a>. The allowed values are - <code title="attr-iframe-sandbox-allow-forms"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-forms">allow-forms</a></code>, - <code title="attr-iframe-sandbox-allow-popups"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-popups">allow-popups</a></code>, - <code title="attr-iframe-sandbox-allow-same-origin"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code>, - <code title="attr-iframe-sandbox-allow-scripts"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code>, and - <code title="attr-iframe-sandbox-allow-top-navigation"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-top-navigation">allow-top-navigation</a></code>. - When the attribute is set, the content is treated as being from a - unique <a href="textFieldSelection.html#origin-0">origin</a>, forms and scripts are disabled, links - are prevented from targeting other <a href="textFieldSelection.html#browsing-context" title="browsing - context">browsing contexts</a>, and plugins are secured. The - <code title="attr-iframe-sandbox-allow-same-origin"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code> - keyword allows the content to be treated as being from the same - origin instead of forcing it into a unique origin, the <code title="attr-iframe-sandbox-allow-top-navigation"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-top-navigation">allow-top-navigation</a></code> - keyword allows the content to <a href="textFieldSelection.html#navigate">navigate</a> its - <a href="textFieldSelection.html#top-level-browsing-context">top-level browsing context</a>, and the <code title="attr-iframe-sandbox-allow-forms"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-forms">allow-forms</a></code>, <code title="attr-iframe-sandbox-allow-popups"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-popups">allow-popups</a></code> and <code title="attr-iframe-sandbox-allow-scripts"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> - keywords re-enable forms, popups, and scripts respectively.</p> + <hr><!-- SANDBOX --><p>The <dfn id="attr-iframe-sandbox" title="attr-iframe-sandbox"><code>sandbox</code></dfn> attribute, when specified, + enables a set of extra restrictions on any content hosted by the <code><a href="#the-iframe-element">iframe</a></code>. Its value + must be an <a href="common-microsyntaxes.html#unordered-set-of-unique-space-separated-tokens">unordered set of unique space-separated tokens</a> that are <a href="infrastructure.html#ascii-case-insensitive">ASCII + case-insensitive</a>. The allowed values are <code title="attr-iframe-sandbox-allow-forms"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-forms">allow-forms</a></code>, <code title="attr-iframe-sandbox-allow-popups"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-popups">allow-popups</a></code>, <code title="attr-iframe-sandbox-allow-same-origin"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code>, <code title="attr-iframe-sandbox-allow-scripts"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code>, and <code title="attr-iframe-sandbox-allow-top-navigation"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-top-navigation">allow-top-navigation</a></code>.</p> - <p class="warning">Setting both the - <code title="attr-iframe-sandbox-allow-scripts"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> and - <code title="attr-iframe-sandbox-allow-same-origin"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code> - keywords together when the embedded page has the <a href="textFieldSelection.html#same-origin">same - origin</a> as the page containing the <code><a href="#the-iframe-element">iframe</a></code> allows - the embedded page to simply remove the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute.</p> + <p>When the attribute is set, the content is treated as being from a unique <a href="textFieldSelection.html#origin-0">origin</a>, + forms and scripts are disabled, links are prevented from targeting other <a href="textFieldSelection.html#browsing-context" title="browsing + context">browsing contexts</a>, and plugins are secured. The <code title="attr-iframe-sandbox-allow-same-origin"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code> keyword allows the content + to be treated as being from the same origin instead of forcing it into a unique origin, the <code title="attr-iframe-sandbox-allow-top-navigation"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-top-navigation">allow-top-navigation</a></code> keyword allows the + content to <a href="textFieldSelection.html#navigate">navigate</a> its <a href="textFieldSelection.html#top-level-browsing-context">top-level browsing context</a>, and the <code title="attr-iframe-sandbox-allow-forms"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-forms">allow-forms</a></code>, <code title="attr-iframe-sandbox-allow-popups"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-popups">allow-popups</a></code> and <code title="attr-iframe-sandbox-allow-scripts"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> keywords re-enable forms, popups, + and scripts respectively.</p> - <p class="warning">Sandboxing hostile content is of minimal help if - an attacker can convince the user to just visit the hostile content - directly, rather than in the <code><a href="#the-iframe-element">iframe</a></code>. To limit the - damage that can be caused by hostile HTML content, it should be - served from a separate dedicated domain.</p> + <p class="warning">Setting both the <code title="attr-iframe-sandbox-allow-scripts"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> and <code title="attr-iframe-sandbox-allow-same-origin"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code> keywords together when the + embedded page has the <a href="textFieldSelection.html#same-origin">same origin</a> as the page containing the <code><a href="#the-iframe-element">iframe</a></code> + allows the embedded page to simply remove the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> + attribute.</p> + + <p class="warning">Sandboxing hostile content is of minimal help if an attacker can convince the + user to just visit the hostile content directly, rather than in the <code><a href="#the-iframe-element">iframe</a></code>. To limit + the damage that can be caused by hostile HTML content, it should be served from a separate + dedicated domain.</p> <div class="impl"> @@ -692,50 +627,42 @@ - block access to 'parent.frames' from sandbox --> - <p>While the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> - attribute is set or changed, the user agent must <a href="textFieldSelection.html#parse-a-sandboxing-directive" title="parse - a sandboxing directive">parse the sandboxing directive</a> using - the attribute's value as the <var title="">input</var> and the - <code><a href="#the-iframe-element">iframe</a></code> element's <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a>'s - <a href="textFieldSelection.html#iframe-sandboxing-flag-set"><code>iframe</code> sandboxing flag set</a> as the + <p>While the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute is set or changed, the + user agent must <a href="textFieldSelection.html#parse-a-sandboxing-directive" title="parse a sandboxing directive">parse the sandboxing directive</a> + using the attribute's value as the <var title="">input</var> and the <code><a href="#the-iframe-element">iframe</a></code> element's + <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a>'s <a href="textFieldSelection.html#iframe-sandboxing-flag-set"><code>iframe</code> sandboxing flag set</a> as the output.</p> - <p class="warning">These flags only take effect when the - <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> of the <code><a href="#the-iframe-element">iframe</a></code> is - <a href="textFieldSelection.html#navigate" title="navigate">navigated</a>. Removing them, or removing - the entire <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> - attribute, has no effect on an already-loaded page.</p> + <p class="warning">These flags only take effect when the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> of + the <code><a href="#the-iframe-element">iframe</a></code> is <a href="textFieldSelection.html#navigate" title="navigate">navigated</a>. Removing them, or removing the + entire <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute, has no effect on an + already-loaded page.</p> </div> <div class="example"> - <p>In this example, some completely-unknown, potentially hostile, - user-provided HTML content is embedded in a page. Because it is - served from a separate domain, it is affected by all the normal - cross-site restrictions. In addition, the embedded page has - scripting disabled, plugins disabled, forms disabled, and it cannot - navigate any frames or windows other than itself (or any frames or + <p>In this example, some completely-unknown, potentially hostile, user-provided HTML content is + embedded in a page. Because it is served from a separate domain, it is affected by all the normal + cross-site restrictions. In addition, the embedded page has scripting disabled, plugins disabled, + forms disabled, and it cannot navigate any frames or windows other than itself (or any frames or windows it itself embeds).</p> <pre><p>We're not scared of you! Here is your content, unedited:</p> <iframe sandbox src="http://usercontent.example.net/getusercontent.cgi?id=12193"></iframe></pre> - <p class="warning">It is important to use a separate domain so that - if the attacker convinces the user to visit that page directly, the - page doesn't run in the context of the site's origin, which would - make the user vulnerable to any attack found in the page.</p> + <p class="warning">It is important to use a separate domain so that if the attacker convinces the + user to visit that page directly, the page doesn't run in the context of the site's origin, which + would make the user vulnerable to any attack found in the page.</p> </div> <div class="example"> - <p>In this example, a gadget from another site is embedded. The - gadget has scripting and forms enabled, and the origin sandbox - restrictions are lifted, allowing the gadget to communicate with - its originating server. The sandbox is still useful, however, as it - disables plugins and popups, thus reducing the risk of the user - being exposed to malware and other annoyances.</p> + <p>In this example, a gadget from another site is embedded. The gadget has scripting and forms + enabled, and the origin sandbox restrictions are lifted, allowing the gadget to communicate with + its originating server. The sandbox is still useful, however, as it disables plugins and popups, + thus reducing the risk of the user being exposed to malware and other annoyances.</p> <pre><iframe sandbox="allow-same-origin allow-forms allow-scripts" src="http://maps.example.com/embedded.html"></iframe></pre> @@ -756,270 +683,218 @@ <pre><a href=D>Link</a></pre> - <p>For this example, suppose all the files were served as - <code><a href="textFieldSelection.html#text/html">text/html</a></code>.</p> + <p>For this example, suppose all the files were served as <code><a href="textFieldSelection.html#text/html">text/html</a></code>.</p> - <p>Page C in this scenario has all the sandboxing flags - set. Scripts are disabled, because the <code><a href="#the-iframe-element">iframe</a></code> in A has - scripts disabled, and this overrides the <code title="attr-iframe-sandbox-allow-scripts"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> - keyword set on the <code><a href="#the-iframe-element">iframe</a></code> in B. Forms are also - disabled, because the inner <code><a href="#the-iframe-element">iframe</a></code> (in B) does not - have the <code title="attr-iframe-sandbox-allow-forms"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-forms">allow-forms</a></code> keyword + <p>Page C in this scenario has all the sandboxing flags set. Scripts are disabled, because the + <code><a href="#the-iframe-element">iframe</a></code> in A has scripts disabled, and this overrides the <code title="attr-iframe-sandbox-allow-scripts"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> keyword set on the + <code><a href="#the-iframe-element">iframe</a></code> in B. Forms are also disabled, because the inner <code><a href="#the-iframe-element">iframe</a></code> (in B) + does not have the <code title="attr-iframe-sandbox-allow-forms"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-forms">allow-forms</a></code> keyword set.</p> - <p>Suppose now that a script in A removes all the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attributes in A - <!--grammar-check-override--> and B. This would change nothing - immediately. If the user clicked the link in C, loading page D into - the <code><a href="#the-iframe-element">iframe</a></code> in B, page D would now act as if the - <code><a href="#the-iframe-element">iframe</a></code> in B had the <code title="attr-iframe-sandbox-allow-same-origin"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code> - and <code title="attr-iframe-sandbox-allow-forms"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-forms">allow-forms</a></code> keywords - set, because that was the state of the <a href="textFieldSelection.html#nested-browsing-context">nested browsing - context</a> in the <code><a href="#the-iframe-element">iframe</a></code> in A when page B was + <p>Suppose now that a script in A removes all the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attributes in A <!--grammar-check-override--> and B. + This would change nothing immediately. If the user clicked the link in C, loading page D into the + <code><a href="#the-iframe-element">iframe</a></code> in B, page D would now act as if the <code><a href="#the-iframe-element">iframe</a></code> in B had the <code title="attr-iframe-sandbox-allow-same-origin"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code> and <code title="attr-iframe-sandbox-allow-forms"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-forms">allow-forms</a></code> keywords set, because that was the + state of the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> in the <code><a href="#the-iframe-element">iframe</a></code> in A when page B was loaded.</p> - <p>Generally speaking, dynamically removing or changing the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute is - ill-advised, because it can make it quite hard to reason about what - will be allowed and what will not.</p> + <p>Generally speaking, dynamically removing or changing the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute is ill-advised, because it can make it quite + hard to reason about what will be allowed and what will not.</p> </div> - <p class="note">Potentially hostile files should not be served from - the same server as the file containing the <code><a href="#the-iframe-element">iframe</a></code> - element. Using a different domain ensures that scripts in the files - are unable to attack the site, even if the user is tricked into - visiting those pages directly, without the protection of the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute.</p> + <p class="note">Potentially hostile files should not be served from the same server as the file + containing the <code><a href="#the-iframe-element">iframe</a></code> element. Using a different domain ensures that scripts in the + files are unable to attack the site, even if the user is tricked into visiting those pages + directly, without the protection of the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> + attribute.</p> <p class="warning">If the <code title="attr-iframe-sandbox-allow-scripts"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-scripts">allow-scripts</a></code> - keyword is set along with <code title="attr-iframe-sandbox-allow-same-origin"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code> - keyword, and the file is from the <a href="textFieldSelection.html#same-origin">same origin</a> as the - <code><a href="#the-iframe-element">iframe</a></code>'s <code><a href="dom.html#document">Document</a></code>, then a script in the - "sandboxed" iframe could just reach out, remove the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute, and then - reload itself, effectively breaking out of the sandbox - altogether.</p> + keyword is set along with <code title="attr-iframe-sandbox-allow-same-origin"><a href="textFieldSelection.html#attr-iframe-sandbox-allow-same-origin">allow-same-origin</a></code> keyword, and the file is + from the <a href="textFieldSelection.html#same-origin">same origin</a> as the <code><a href="#the-iframe-element">iframe</a></code>'s <code><a href="dom.html#document">Document</a></code>, then a + script in the "sandboxed" iframe could just reach out, remove the <code title="attr-iframe-sandbox"><a href="#attr-iframe-sandbox">sandbox</a></code> attribute, and then reload itself, effectively breaking + out of the sandbox altogether.</p> - <hr><!-- v2: Might be interesting to have a value on seamless that - allowed event propagation of some sort, maybe based on the WICD - work: http://www.w3.org/TR/WICD/ --><p>The <dfn id="attr-iframe-seamless" title="attr-iframe-seamless"><code>seamless</code></dfn> - attribute is a <a href="common-microsyntaxes.html#boolean-attribute">boolean attribute</a>. When specified, it - indicates that the <code><a href="#the-iframe-element">iframe</a></code> element's <a href="textFieldSelection.html#browsing-context">browsing - context</a> is to be rendered in a manner that makes it appear to - be part of the containing document (seamlessly included in the - parent document).</p> + <hr><!-- SEAMLESS --><!-- v2: Might be interesting to have a value on seamless that allowed event propagation of some + sort, maybe based on the WICD work: http://www.w3.org/TR/WICD/ --><p>The <dfn id="attr-iframe-seamless" title="attr-iframe-seamless"><code>seamless</code></dfn> attribute is a <a href="common-microsyntaxes.html#boolean-attribute">boolean + attribute</a>. When specified, it indicates that the <code><a href="#the-iframe-element">iframe</a></code> element's + <a href="textFieldSelection.html#browsing-context">browsing context</a> is to be rendered in a manner that makes it appear to be part of the + containing document (seamlessly included in the parent document).</p> <div class="impl"> - <p>An <code><a href="#the-iframe-element">iframe</a></code> element is said to be <dfn id="in-seamless-mode">in seamless - mode</dfn> when all of the following conditions are met:</p> + <p>An <code><a href="#the-iframe-element">iframe</a></code> element is said to be <dfn id="in-seamless-mode">in seamless mode</dfn> when all of the + following conditions are met:</p> - <ul><li>The <code title="attr-iframe-seamless"><a href="#attr-iframe-seamless">seamless</a></code> - attribute is set on the <code><a href="#the-iframe-element">iframe</a></code> element, and + <ul><li>The <code title="attr-iframe-seamless"><a href="#attr-iframe-seamless">seamless</a></code> attribute is set on the + <code><a href="#the-iframe-element">iframe</a></code> element, and - </li><li>The <code><a href="#the-iframe-element">iframe</a></code> element's owner <code><a href="dom.html#document">Document</a></code>'s - <a href="textFieldSelection.html#active-sandboxing-flag-set">active sandboxing flag set</a> does not have the - <a href="textFieldSelection.html#sandboxed-seamless-iframes-flag">sandboxed seamless iframes flag</a> set, and + </li><li>The <code><a href="#the-iframe-element">iframe</a></code> element's owner <code><a href="dom.html#document">Document</a></code>'s <a href="textFieldSelection.html#active-sandboxing-flag-set">active sandboxing flag + set</a> does not have the <a href="textFieldSelection.html#sandboxed-seamless-iframes-flag">sandboxed seamless iframes flag</a> set, and </li><li>Either: - <ul><li>The <a href="textFieldSelection.html#browsing-context">browsing context</a>'s <a href="textFieldSelection.html#active-document">active - document</a> has the <a href="textFieldSelection.html#same-origin">same origin</a> as the - <code><a href="#the-iframe-element">iframe</a></code> element's <code><a href="dom.html#document">Document</a></code>, or + <ul><li>The <a href="textFieldSelection.html#browsing-context">browsing context</a>'s <a href="textFieldSelection.html#active-document">active document</a> has the <a href="textFieldSelection.html#same-origin">same + origin</a> as the <code><a href="#the-iframe-element">iframe</a></code> element's <code><a href="dom.html#document">Document</a></code>, or - </li><li>The <a href="textFieldSelection.html#browsing-context">browsing context</a>'s <a href="textFieldSelection.html#active-document">active - document</a>'s <em><a href="the-address-element.html#the-address-element"><span title="the document's - address">address</span></a></em> has the <a href="textFieldSelection.html#same-origin">same origin</a> as - the <code><a href="#the-iframe-element">iframe</a></code> element's <code><a href="dom.html#document">Document</a></code>, or + </li><li>The <a href="textFieldSelection.html#browsing-context">browsing context</a>'s <a href="textFieldSelection.html#active-document">active document</a>'s <em><a href="the-address-element.html#the-address-element"><span title="the + document's address">address</span></a></em> has the <a href="textFieldSelection.html#same-origin">same origin</a> as the + <code><a href="#the-iframe-element">iframe</a></code> element's <code><a href="dom.html#document">Document</a></code>, or - </li><li>The <a href="textFieldSelection.html#browsing-context">browsing context</a>'s <a href="textFieldSelection.html#active-document">active - document</a> is <a href="#an-iframe-srcdoc-document">an <code>iframe</code> <code title="attr-iframe-srcdoc">srcdoc</code> document</a>. + </li><li>The <a href="textFieldSelection.html#browsing-context">browsing context</a>'s <a href="textFieldSelection.html#active-document">active document</a> is <a href="#an-iframe-srcdoc-document">an + <code>iframe</code> <code title="attr-iframe-srcdoc">srcdoc</code> document</a>. </li></ul></li> - </ul><p>When an <code><a href="#the-iframe-element">iframe</a></code> element is <a href="#in-seamless-mode">in seamless - mode</a>, the following requirements apply:</p> + </ul><p>When an <code><a href="#the-iframe-element">iframe</a></code> element is <a href="#in-seamless-mode">in seamless mode</a>, the following + requirements apply:</p> - <ul><li><p>The user agent must set the <dfn id="seamless-browsing-context-flag">seamless browsing context - flag</dfn> to true for that <a href="textFieldSelection.html#browsing-context">browsing context</a>. This - will <a href="textFieldSelection.html#seamlessLinks">cause links to open in the parent - browsing context</a> unless an <a href="textFieldSelection.html#explicit-self-navigation-override">explicit self-navigation - override</a> is used (<code title="">target="_self"</code>).</p></li> + <ul><li><p>The user agent must set the <dfn id="seamless-browsing-context-flag">seamless browsing context flag</dfn> to true for that + <a href="textFieldSelection.html#browsing-context">browsing context</a>. This will <a href="textFieldSelection.html#seamlessLinks">cause links to open in the + parent browsing context</a> unless an <a href="textFieldSelection.html#explicit-self-navigation-override">explicit self-navigation override</a> is used + (<code title="">target="_self"</code>).</p></li> - <li><p>Media queries in the context of the <code><a href="#the-iframe-element">iframe</a></code>'s - <a href="textFieldSelection.html#browsing-context">browsing context</a> (e.g. on <code title="attr-style-media"><a href="the-style-element.html#attr-style-media">media</a></code> attributes of - <code><a href="the-style-element.html#the-style-element">style</a></code> elements in <code><a href="dom.html#document">Document</a></code>s in that - <code><a href="#the-iframe-element">iframe</a></code>) must be evaluated with respect to the nearest - <a href="textFieldSelection.html#ancestor-browsing-context">ancestor browsing context</a> that is not itself being - <a href="textFieldSelection.html#browsing-context-nested-through" title="browsing context nested through">nested through</a> - an <code><a href="#the-iframe-element">iframe</a></code> that is <a href="#in-seamless-mode">in seamless + <li><p>Media queries in the context of the <code><a href="#the-iframe-element">iframe</a></code>'s <a href="textFieldSelection.html#browsing-context">browsing context</a> + (e.g. on <code title="attr-style-media"><a href="the-style-element.html#attr-style-media">media</a></code> attributes of <code><a href="the-style-element.html#the-style-element">style</a></code> elements in + <code><a href="dom.html#document">Document</a></code>s in that <code><a href="#the-iframe-element">iframe</a></code>) must be evaluated with respect to the nearest + <a href="textFieldSelection.html#ancestor-browsing-context">ancestor browsing context</a> that is not itself being <a href="textFieldSelection.html#browsing-context-nested-through" title="browsing context + nested through">nested through</a> an <code><a href="#the-iframe-element">iframe</a></code> that is <a href="#in-seamless-mode">in seamless mode</a>. <a href="textFieldSelection.html#refsMQ">[MQ]</a></p></li> - <li><p>In a CSS-supporting user agent: the user agent must add all - the style sheets that apply to the <code><a href="#the-iframe-element">iframe</a></code> element to - the cascade of the <a href="textFieldSelection.html#active-document">active document</a> of the - <code><a href="#the-iframe-element">iframe</a></code> element's <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a>, - at the appropriate cascade levels, before any style sheets - specified by the document itself.</p></li> + <li><p>In a CSS-supporting user agent: the user agent must add all the style sheets that apply to + the <code><a href="#the-iframe-element">iframe</a></code> element to the cascade of the <a href="textFieldSelection.html#active-document">active document</a> of the + <code><a href="#the-iframe-element">iframe</a></code> element's <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a>, at the appropriate cascade + levels, before any style sheets specified by the document itself.</p></li> - <li><p>In a CSS-supporting user agent: the user agent must, for the - purpose of CSS property inheritance only, treat the root element of - the <a href="textFieldSelection.html#active-document">active document</a> of the <code><a href="#the-iframe-element">iframe</a></code> - element's <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> as being a child of - the <code><a href="#the-iframe-element">iframe</a></code> element. (Thus inherited properties on the - root element of the document in the <code><a href="#the-iframe-element">iframe</a></code> will - inherit the computed values of those properties on the - <code><a href="#the-iframe-element">iframe</a></code> element instead of taking their initial - values.)</p></li> + <li><p>In a CSS-supporting user agent: the user agent must, for the purpose of CSS property + inheritance only, treat the root element of the <a href="textFieldSelection.html#active-document">active document</a> of the + <code><a href="#the-iframe-element">iframe</a></code> element's <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> as being a child of the + <code><a href="#the-iframe-element">iframe</a></code> element. (Thus inherited properties on the root element of the document in + the <code><a href="#the-iframe-element">iframe</a></code> will inherit the computed values of those properties on the + <code><a href="#the-iframe-element">iframe</a></code> element instead of taking their initial values.)</p></li> - <li><p>In visual media, in a CSS-supporting user agent: the user - agent should set the intrinsic width of the <code><a href="#the-iframe-element">iframe</a></code> to - the width that the element would have if it was a non-replaced - block-level element with 'width: auto', unless that width would be - zero (e.g. if the element is floating or absolutely positioned), in - which case the user agent should set the intrinsic width of the - <code><a href="#the-iframe-element">iframe</a></code> to the shrink-to-fit width of the root element - (if any) of the content rendered in the - <code><a href="#the-iframe-element">iframe</a></code>.</p></li> + <li><p>In visual media, in a CSS-supporting user agent: the user agent should set the intrinsic + width of the <code><a href="#the-iframe-element">iframe</a></code> to the width that the element would have if it was a + non-replaced block-level element with 'width: auto', unless that width would be zero (e.g. if the + element is floating or absolutely positioned), in which case the user agent should set the + intrinsic width of the <code><a href="#the-iframe-element">iframe</a></code> to the shrink-to-fit width of the root element (if + any) of the content rendered in the <code><a href="#the-iframe-element">iframe</a></code>.</p></li> - <li><p>In visual media, in a CSS-supporting user agent: the user - agent should set the intrinsic height of the <code><a href="#the-iframe-element">iframe</a></code> to - the shortest height that would make the content rendered in the - <code><a href="#the-iframe-element">iframe</a></code> at its current width (as given in the previous - bullet point) have no scrollable overflow at its bottom edge<!--, - if the scrolling position was such that the top of the viewport for - the content rendered in the <code>iframe</code> was aligned with - the origin of that content's canvas-->. Scrollable overflow is any - overflow that would increase the range to which a scrollbar or - other scrolling mechanism can scroll.</p></li> + <li><p>In visual media, in a CSS-supporting user agent: the user agent should set the intrinsic + height of the <code><a href="#the-iframe-element">iframe</a></code> to the shortest height that would make the content rendered in + the <code><a href="#the-iframe-element">iframe</a></code> at its current width (as given in the previous bullet point) have no + scrollable overflow at its bottom edge<!--, if the scrolling position was such that the top of + the viewport for the content rendered in the <code>iframe</code> was aligned with the origin of + that content's canvas-->. Scrollable overflow is any overflow that would increase the range to + which a scrollbar or other scrolling mechanism can scroll.</p></li> <li> - <p>In visual media, in a CSS-supporting user agent: the user agent - must force the height of the initial containing block of the - <a href="textFieldSelection.html#active-document">active document</a> of the <a href="textFieldSelection.html#nested-browsing-context">nested browsing + <p>In visual media, in a CSS-supporting user agent: the user agent must force the height of the + initial containing block of the <a href="textFieldSelection.html#active-document">active document</a> of the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> of the <code><a href="#the-iframe-element">iframe</a></code> to zero.</p> - <p class="note">This is intended to get around the otherwise - circular dependency of percentage dimensions that depend on the - height of the containing block, thus affecting the height of the - document's bounding box, thus affecting the height of the - viewport, thus affecting the size of the initial containing - block.</p> + <p class="note">This is intended to get around the otherwise circular dependency of percentage + dimensions that depend on the height of the containing block, thus affecting the height of the + document's bounding box, thus affecting the height of the viewport, thus affecting the size of + the initial containing block.</p> </li> - <li><p>In speech media, the user agent should render the <a href="textFieldSelection.html#nested-browsing-context">nested - browsing context</a> without announcing that it is a separate - document.</p></li> + <li><p>In speech media, the user agent should render the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> + without announcing that it is a separate document.</p></li> <li> - <p>User agents should, in general, act as if the <a href="textFieldSelection.html#active-document">active - document</a> of the <code><a href="#the-iframe-element">iframe</a></code>'s <a href="textFieldSelection.html#nested-browsing-context">nested browsing - context</a> was part of the document that the + <p>User agents should, in general, act as if the <a href="textFieldSelection.html#active-document">active document</a> of the + <code><a href="#the-iframe-element">iframe</a></code>'s <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> was part of the document that the <code><a href="#the-iframe-element">iframe</a></code> is in, if any.</p> - <p class="example">For example if the user agent supports listing - all the links in a document, links in "seamlessly" nested - documents would be included in that list without being + <p class="example">For example if the user agent supports listing all the links in a document, + links in "seamlessly" nested documents would be included in that list without being significantly distinguished from links in the document itself.</p> </li> - </ul><p>If the attribute is not specified, or if the <a href="textFieldSelection.html#origin-0">origin</a> - conditions listed above are not met, then the user agent should - render the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> in a manner that is - clearly distinguishable as a separate <a href="textFieldSelection.html#browsing-context">browsing context</a>, - and the <a href="#seamless-browsing-context-flag">seamless browsing context flag</a> must be set to - false for that <a href="textFieldSelection.html#browsing-context">browsing context</a>.</p> + </ul><p>If the attribute is not specified, or if the <a href="textFieldSelection.html#origin-0">origin</a> conditions listed above are + not met, then the user agent should render the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> in a manner + that is clearly distinguishable as a separate <a href="textFieldSelection.html#browsing-context">browsing context</a>, and the + <a href="#seamless-browsing-context-flag">seamless browsing context flag</a> must be set to false for that <a href="textFieldSelection.html#browsing-context">browsing + context</a>.</p> - <p class="warning">It is important that user agents recheck the - above conditions whenever the <a href="textFieldSelection.html#active-document">active document</a> of the - <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> of the <code><a href="#the-iframe-element">iframe</a></code> - changes, such that the <a href="#seamless-browsing-context-flag">seamless browsing context flag</a> - gets unset if the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> is <a href="textFieldSelection.html#navigate" title="navigate">navigated</a> to another origin.</p> + <p class="warning">It is important that user agents recheck the above conditions whenever the + <a href="textFieldSelection.html#active-document">active document</a> of the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> of the + <code><a href="#the-iframe-element">iframe</a></code> changes, such that the <a href="#seamless-browsing-context-flag">seamless browsing context flag</a> gets unset + if the <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a> is <a href="textFieldSelection.html#navigate" title="navigate">navigated</a> to another + origin.</p> </div> - <p class="note">The attribute can be set or removed dynamically, - with the rendering updating in tandem.</p> + <p class="note">The attribute can be set or removed dynamically, with the rendering updating in + tandem.</p> <div class="example"> - <p>In this example, the site's navigation is embedded using a - client-side include using an <code><a href="#the-iframe-element">iframe</a></code>. Any links in the - <code><a href="#the-iframe-element">iframe</a></code> will, in new user agents, be automatically - opened in the <code><a href="#the-iframe-element">iframe</a></code>'s parent browsing context; for - legacy user agents, the site could also include a <code><a href="the-base-element.html#the-base-element">base</a></code> - element with a <code title="attr-base-target"><a href="the-base-element.html#attr-base-target">target</a></code> - attribute with the value <code title="">_parent</code>. Similarly, - in new user agents the styles of the parent page will be - automatically applied to the contents of the frame, but to support - legacy user agents authors might wish to include the styles + <p>In this example, the site's navigation is embedded using a client-side include using an + <code><a href="#the-iframe-element">iframe</a></code>. Any links in the <code><a href="#the-iframe-element">iframe</a></code> will, in new user agents, be + automatically opened in the <code><a href="#the-iframe-element">iframe</a></code>'s parent browsing context; for legacy user + agents, the site could also include a <code><a href="the-base-element.html#the-base-element">base</a></code> element with a <code title="attr-base-target"><a href="the-base-element.html#attr-base-target">target</a></code> attribute with the value <code title="">_parent</code>. + Similarly, in new user agents the styles of the parent page will be automatically applied to the + contents of the frame, but to support legacy user agents authors might wish to include the styles explicitly.</p> <pre><nav><iframe seamless src="nav.include.html"></iframe></nav></pre> </div> - <p class="note">The <code title="attr-contenteditable"><a href="textFieldSelection.html#attr-contenteditable">contenteditable</a></code> attribute does - not propagate into <code title="attr-iframe-seamless"><a href="#attr-iframe-seamless">seamless</a></code> - <code><a href="#the-iframe-element">iframe</a></code>s.</p> + <p class="note">The <code title="attr-contenteditable"><a href="textFieldSelection.html#attr-contenteditable">contenteditable</a></code> attribute does not + propagate into <code title="attr-iframe-seamless"><a href="#attr-iframe-seamless">seamless</a></code> <code><a href="#the-iframe-element">iframe</a></code>s.</p> - <hr><p>The <code><a href="#the-iframe-element">iframe</a></code> element supports <a href="dimension-attributes.html#dimension-attributes">dimension - attributes</a> for cases where the embedded content has specific - dimensions (e.g. ad units have well-defined dimensions).</p> - <p>An <code><a href="#the-iframe-element">iframe</a></code> element never has <a href="content-models.html#fallback-content">fallback - content</a>, as it will always create a nested <a href="textFieldSelection.html#browsing-context">browsing - context</a>, regardless of whether the specified initial contents - are successfully used.</p> + <hr><!-- DIM ATTRIBUTES --><p>The <code><a href="#the-iframe-element">iframe</a></code> element supports <a href="dimension-attributes.html#dimension-attributes">dimension attributes</a> for cases where the + embedded content has specific dimensions (e.g. ad units have well-defined dimensions).</p> - <p>Descendants of <code><a href="#the-iframe-element">iframe</a></code> elements represent - nothing. (In legacy user agents that do not support - <code><a href="#the-iframe-element">iframe</a></code> elements, the contents would be parsed as markup - that could act as fallback content.)</p> + <p>An <code><a href="#the-iframe-element">iframe</a></code> element never has <a href="content-models.html#fallback-content">fallback content</a>, as it will always + create a nested <a href="textFieldSelection.html#browsing-context">browsing context</a>, regardless of whether the specified initial + contents are successfully used.</p> - <p id="iframe-content-model">When used in <a href="infrastructure.html#html-documents">HTML - documents</a>, the allowed content model of <code><a href="#the-iframe-element">iframe</a></code> - elements is text, except that invoking the <a href="textFieldSelection.html#html-fragment-parsing-algorithm">HTML fragment - parsing algorithm</a> with the <code><a href="#the-iframe-element">iframe</a></code> element as the - <var title="concept-frag-parse-context"><a href="textFieldSelection.html#concept-frag-parse-context">context</a></var> element and - the text contents as the <var title="">input</var> must result in a - list of nodes that are all <a href="content-models.html#phrasing-content-1">phrasing content</a>, with no - <a href="textFieldSelection.html#parse-error" title="parse error">parse errors</a> having occurred, with - no <code><a href="the-script-element.html#the-script-element">script</a></code> elements being anywhere in the list or as - descendants of elements in the list, and with all the elements in - the list (including their descendants) being themselves - conforming.</p> - <p>The <code><a href="#the-iframe-element">iframe</a></code> element must be empty in <a href="infrastructure.html#xml-documents">XML - documents</a>.</p> + <hr><!-- FALLBACK --><p>Descendants of <code><a href="#the-iframe-element">iframe</a></code> elements represent nothing. (In legacy user agents that do + not support <code><a href="#the-iframe-element">iframe</a></code> elements, the contents would be parsed as markup that could act as + fallback content.)</p> + + <p id="iframe-content-model">When used in <a href="infrastructure.html#html-documents">HTML documents</a>, the allowed content model + of <code><a href="#the-iframe-element">iframe</a></code> elements is text, except that invoking the <a href="textFieldSelection.html#html-fragment-parsing-algorithm">HTML fragment parsing + algorithm</a> with the <code><a href="#the-iframe-element">iframe</a></code> element as the <var title="concept-frag-parse-context"><a href="textFieldSelection.html#concept-frag-parse-context">context</a></var> element and the text contents as the <var title="">input</var> must result in a list of nodes that are all <a href="content-models.html#phrasing-content-1">phrasing content</a>, + with no <a href="textFieldSelection.html#parse-error" title="parse error">parse errors</a> having occurred, with no <code><a href="the-script-element.html#the-script-element">script</a></code> + elements being anywhere in the list or as descendants of elements in the list, and with all the + elements in the list (including their descendants) being themselves conforming.</p> + + <p>The <code><a href="#the-iframe-element">iframe</a></code> element must be empty in <a href="infrastructure.html#xml-documents">XML documents</a>.</p> + + <p class="note">The <a href="textFieldSelection.html#html-parser">HTML parser</a> treats markup inside <code><a href="#the-iframe-element">iframe</a></code> elements as + text.</p> - <p class="note">The <a href="textFieldSelection.html#html-parser">HTML parser</a> treats markup inside - <code><a href="#the-iframe-element">iframe</a></code> elements as text.</p> <div class="impl"> - <p>The IDL attributes <dfn id="dom-iframe-src" title="dom-iframe-src"><code>src</code></dfn>, <dfn id="dom-iframe-srcdoc" title="dom-iframe-srcdoc"><code>srcdoc</code></dfn>, <dfn id="dom-iframe-name" title="dom-iframe-name"><code>name</code></dfn>, <dfn id="dom-iframe-sandbox" title="dom-iframe-sandbox"><code>sandbox</code></dfn>, and <dfn id="dom-iframe-seamless" title="dom-iframe-seamless"><code>seamless</code></dfn> must - <a href="common-dom-interfaces.html#reflect">reflect</a> the respective content attributes of the same - name.</p> + <hr><!-- DOM --><p>The IDL attributes <dfn id="dom-iframe-src" title="dom-iframe-src"><code>src</code></dfn>, <dfn id="dom-iframe-srcdoc" title="dom-iframe-srcdoc"><code>srcdoc</code></dfn>, <dfn id="dom-iframe-name" title="dom-iframe-name"><code>name</code></dfn>, <dfn id="dom-iframe-sandbox" title="dom-iframe-sandbox"><code>sandbox</code></dfn>, and <dfn id="dom-iframe-seamless" title="dom-iframe-seamless"><code>seamless</code></dfn> must <a href="common-dom-interfaces.html#reflect">reflect</a> the respective + content attributes of the same name.</p> - <p>The <dfn id="dom-iframe-contentdocument" title="dom-iframe-contentDocument"><code>contentDocument</code></dfn> - IDL attribute must return the <code><a href="dom.html#document">Document</a></code> object of the - <a href="textFieldSelection.html#active-document">active document</a> of the <code><a href="#the-iframe-element">iframe</a></code> element's - <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a>, if any, or null otherwise.</p> + <p>The <dfn id="dom-iframe-contentdocument" title="dom-iframe-contentDocument"><code>contentDocument</code></dfn> IDL attribute + must return the <code><a href="dom.html#document">Document</a></code> object of the <a href="textFieldSelection.html#active-document">active document</a> of the + <code><a href="#the-iframe-element">iframe</a></code> element's <a href="textFieldSelection.html#nested-browsing-context">nested browsing context</a>, if any, or null otherwise.</p> - <p>The <dfn id="dom-iframe-contentwindow" title="dom-iframe-contentWindow"><code>contentWindow</code></dfn> - IDL attribute must return the <code><a href="textFieldSelection.html#windowproxy">WindowProxy</a></code> object of the - <code><a href="#the-iframe-element">iframe</a></code> element's <a href="textFieldSelection.html#nested-browsing-context">nested browsing - context</a>, if any, or null otherwise.</p> + <p>The <dfn id="dom-iframe-contentwindow" title="dom-iframe-contentWindow"><code>contentWindow</code></dfn> IDL attribute must + return the <code><a href="textFieldSelection.html#windowproxy">WindowProxy</a></code> object of the <code><a href="#the-iframe-element">iframe</a></code> element's <a href="textFieldSelection.html#nested-browsing-context">nested + browsing context</a>, if any, or null otherwise.</p> </div> <div class="example"> - <p>Here is an example of a page using an <code><a href="#the-iframe-element">iframe</a></code> to - include advertising from an advertising broker:</p> + <p>Here is an example of a page using an <code><a href="#the-iframe-element">iframe</a></code> to include advertising from an + advertising broker:</p> <pre><iframe src="http://ads.example.com/?customerid=923513721&amp;format=banner" width="468" height="60"></iframe></pre> Index: single-page.html =================================================================== RCS file: /sources/public/html5/spec/single-page.html,v retrieving revision 1.168 retrieving revision 1.169 diff -u -d -r1.168 -r1.169 --- single-page.html 14 Oct 2012 09:45:08 -0000 1.168 +++ single-page.html 14 Oct 2012 12:14:44 -0000 1.169 @@ -594,7 +594,7 @@ <li><a href="#processing-model"><span class="secno">2.7.2 </span>Processing model</a></li> <li><a href="#encrypted-http-and-related-security-concerns"><span class="secno">2.7.3 </span>Encrypted HTTP and related security concerns</a></li> <li><a href="#content-type-sniffing"><span class="secno">2.7.4 </span>Determining the type of a resource</a></li> - <li><a href="#extracting-encodings-from-meta-elements"><span class="secno">2.7.5 </span>Extracting encodings from <code>meta</code> elements</a></li> + <li><a href="#extracting-character-encodings-from-meta-elements"><span class="secno">2.7.5 </span>Extracting character encodings from <code>meta</code> elements</a></li> <li><a href="#cors-settings-attributes"><span class="secno">2.7.6 </span>CORS settings attributes</a></li> <li><a href="#cors-enabled-fetch"><span class="secno">2.7.7 </span>CORS-enabled fetch</a></li></ol></li> <li><a href="#common-dom-interfaces"><span class="secno">2.8 </span>Common DOM interfaces</a> @@ -700,9 +700,9 @@ <li><a href="#sections"><span class="secno">4.4 </span>Sections</a> <ol class="toc"> [...5322 lines suppressed...] - <!--REFERENCES OFF--> </dl> @@ -97007,6 +96957,7 @@ Mark Pilgrim, Mark Rowe<!--bdash-->, Mark Schenk, + Mark Vickers, Mark Wilton-Jones, Martijn Wargers, Martin Atkins, @@ -97080,6 +97031,7 @@ Olivier Gendrin, Olli Pettay, oSand, <!-- from reddit --> + Pablo Flouret, Patrick H. Lauke, Patrik Persson, Paul Adenot, Index: media-elements.html =================================================================== RCS file: /sources/public/html5/spec/media-elements.html,v retrieving revision 1.208 retrieving revision 1.209 diff -u -d -r1.208 -r1.209 --- media-elements.html 14 Oct 2012 09:45:08 -0000 1.208 +++ media-elements.html 14 Oct 2012 12:14:44 -0000 1.209 @@ -5149,14 +5149,27 @@ <dt><dfn id="text-track-cue-alignment" title="text track cue alignment">An alignment</dfn> </dt><dd> - <p>An alignment for the text of each line of the cue, either <dfn id="text-track-cue-start-alignment" title="text track cue start alignment">start alignment</dfn> (the - text is aligned towards its start side), <dfn id="text-track-cue-middle-alignment" title="text track - cue middle alignment">middle alignment</dfn> (the text is aligned - centered between its start and end sides), <dfn id="text-track-cue-end-alignment" title="text track - cue end alignment">end alignment</dfn> (the text is aligned - towards its end side). Which sides are the start and end sides - depends on the Unicode bidirectional algorithm and the <a href="#text-track-cue-writing-direction" title="text track cue writing direction">writing - direction</a>. <a href="textFieldSelection.html#refsBIDI">[BIDI]</a></p> + + <p>An alignment for the text of each line of the cue, one of:</p> + + <dl><dt><dfn id="text-track-cue-start-alignment" title="text track cue start alignment">Start alignment</dfn></dt> + <dd>The text is aligned towards its start side.</dd> + + <dt><dfn id="text-track-cue-middle-alignment" title="text track cue middle alignment">Middle alignment</dfn></dt> + <dd>The text is aligned centered between its start and end sides.</dd> + + <dt><dfn id="text-track-cue-end-alignment" title="text track cue end alignment">End alignment</dfn></dt> + <dd>The text is aligned towards its end side.</dd> + + <dt><dfn id="text-track-cue-left-alignment" title="text track cue left alignment">Left alignment</dfn></dt> + <dd>The text is aligned to the left.</dd> + + <dt>or <dfn id="text-track-cue-right-alignment" title="text track cue right alignment">Right alignment</dfn></dt> + <dd>The text is aligned to the right.</dd> + + </dl><p>Which sides are the start and end sides depends on the Unicode bidirectional algorithm and + the <a href="#text-track-cue-writing-direction" title="text track cue writing direction">writing direction</a>. <a href="textFieldSelection.html#refsBIDI">[BIDI]</a></p> + </dd> <dt><dfn id="text-track-cue-text" title="text track cue text">The text of the cue</dfn> @@ -5208,7 +5221,20 @@ </dd> - </dl><p>The <a href="#text-track-cue" title="text track cue">text track cues</a> of a + </dl><p>When a <a href="#text-track-cue">text track cue</a> whose <a href="#text-track-cue-active-flag" title="text track cue active flag">active + flag</a> is set has its + <a href="#text-track-cue-writing-direction" title="text track cue writing direction">writing direction</a>, + <a href="#text-track-cue-snap-to-lines-flag" title="text track cue snap-to-lines flag">snap-to-lines flag</a>, + <a href="#text-track-cue-line-position" title="text track cue line position">line position</a>, + <a href="#text-track-cue-text-position" title="text track cue text position">text position</a>, + <a href="#text-track-cue-size" title="text track cue size">size</a>, + <a href="#text-track-cue-alignment" title="text track cue alignment">alignment</a>, or + <a href="#text-track-cue-text" title="text track cue text">text</a> + change value, then the user agent must empty the <a href="#text-track-cue-display-state">text track cue display state</a>, and + then immediately run the <a href="#text-track">text track</a>'s <a href="infrastructure.html#rules-for-updating-the-display-of-webvtt-text-tracks">rules for updating the display of WebVTT + text tracks</a>.</p> + + <p>The <a href="#text-track-cue" title="text track cue">text track cues</a> of a <a href="#media-element">media element</a>'s <a href="#text-track" title="text track">text tracks</a> are ordered relative to each other in the <dfn id="text-track-cue-order">text track cue order</dfn>, which is determined as follows: first group @@ -6365,6 +6391,10 @@ <dd><p>The string "<code title="">middle</code>".</p></dd> <dt>If it is <a href="#text-track-cue-end-alignment" title="text track cue end alignment">end alignment</a></dt> <dd><p>The string "<code title="">end</code>".</p></dd> + <dt>If it is <a href="#text-track-cue-left-alignment" title="text track cue left alignment">left alignment</a></dt> + <dd><p>The string "<code title="">left</code>".</p></dd> + <dt>If it is <a href="#text-track-cue-right-alignment" title="text track cue right alignment">right alignment</a></dt> + <dd><p>The string "<code title="">right</code>".</p></dd> </dl><p>Can be set.</p> </dd> @@ -6532,6 +6562,8 @@ </th></tr></thead><tbody><tr><td><a href="#text-track-cue-start-alignment" title="text track cue start alignment">Start alignment</a> </td><td> "<code title="">start</code>" </td></tr><tr><td><a href="#text-track-cue-middle-alignment" title="text track cue middle alignment">Middle alignment</a> </td><td> "<code title="">middle</code>" </td></tr><tr><td><a href="#text-track-cue-end-alignment" title="text track cue end alignment">End alignment</a> </td><td> "<code title="">end</code>" + </td></tr><tr><td><a href="#text-track-cue-left-alignment" title="text track cue left alignment">Left alignment</a> </td><td> "<code title="">left</code>" + </td></tr><tr><td><a href="#text-track-cue-right-alignment" title="text track cue right alignment">Right alignment</a> </td><td> "<code title="">right</code>" </td></tr></tbody></table><p>On setting, the <a href="#text-track-cue-alignment">text track cue alignment</a> must be set to the value given in the first cell of the row in the table above whose second cell is a <a href="infrastructure.html#case-sensitive">case-sensitive</a> match for the new Index: the-script-element.html =================================================================== RCS file: /sources/public/html5/spec/the-script-element.html,v retrieving revision 1.204 retrieving revision 1.205 diff -u -d -r1.204 -r1.205 --- the-script-element.html 14 Oct 2012 09:45:17 -0000 1.204 +++ the-script-element.html 14 Oct 2012 12:14:46 -0000 1.205 @@ -799,7 +799,7 @@ the element has been flagged as <a href="#parser-inserted">"parser-inserted"</a>, and either the parser that created the <code><a href="#the-script-element">script</a></code> is an <a href="textFieldSelection.html#xml-parser">XML parser</a> or it's an <a href="textFieldSelection.html#html-parser">HTML parser</a> whose - <a href="textFieldSelection.html#script-nesting-level">script nesting level</a> is zero, and the + <a href="textFieldSelection.html#script-nesting-level">script nesting level</a> is not greater than one, and the <code><a href="dom.html#document">Document</a></code> of the <a href="textFieldSelection.html#html-parser">HTML parser</a> or <a href="textFieldSelection.html#xml-parser">XML parser</a> that created the <code><a href="#the-script-element">script</a></code> element <a href="styling.html#has-a-style-sheet-that-is-blocking-scripts">has a style sheet that is blocking Index: the-input-element.html =================================================================== RCS file: /sources/public/html5/spec/the-input-element.html,v retrieving revision 1.264 retrieving revision 1.265 diff -u -d -r1.264 -r1.265 --- the-input-element.html 14 Oct 2012 09:45:16 -0000 1.264 +++ the-input-element.html 14 Oct 2012 12:14:45 -0000 1.265 @@ -417,7 +417,7 @@ attribute DOMString <a href="#dom-input-step" title="dom-input-step">step</a>; attribute DOMString <a href="#dom-input-type" title="dom-input-type">type</a>; attribute DOMString <a href="#dom-input-defaultvalue" title="dom-input-defaultValue">defaultValue</a>; - attribute DOMString <a href="common-input-element-apis.html#dom-input-value" title="dom-input-value">value</a>; + [TreatNullAs=EmptyString] attribute DOMString <a href="common-input-element-apis.html#dom-input-value" title="dom-input-value">value</a>; attribute <span>Date</span>? <a href="common-input-element-apis.html#dom-input-valueasdate" title="dom-input-valueAsDate">valueAsDate</a>; attribute unrestricted double <a href="common-input-element-apis.html#dom-input-valueasnumber" title="dom-input-valueAsNumber">valueAsNumber</a>; attribute unsigned long <a href="#dom-input-width" title="dom-input-width">width</a>; Index: urls.html =================================================================== RCS file: /sources/public/html5/spec/urls.html,v retrieving revision 1.270 retrieving revision 1.271 diff -u -d -r1.270 -r1.271 --- urls.html 14 Oct 2012 09:45:19 -0000 1.270 +++ urls.html 14 Oct 2012 12:14:46 -0000 1.271 @@ -337,7 +337,7 @@ <a href="common-dom-interfaces.html">2.8 Common DOM interfaces →</a> <ol class="toc"><li><ol><li><a href="urls.html#urls"><span class="secno">2.6 </span>URLs</a> <ol><li><a href="urls.html#terminology-0"><span class="secno">2.6.1 </span>Terminology</a></li><li><a href="urls.html#parsing-urls"><span class="secno">2.6.2 </span>Parsing URLs</a></li><li><a href="urls.html#base-urls"><span class="secno">2.6.3 </span>Base URLs</a></li><li><a href="urls.html#resolving-urls"><span class="secno">2.6.4 </span>Resolving URLs</a></li><li><a href="urls.html#url-manipulation-and-creation"><span class="secno">2.6.5 </span>URL manipulation and creation</a></li><li><a href="urls.html#dynamic-changes-to-base-urls"><span class="secno">2.6.6 </span>Dynamic changes to base URLs</a></li><li><a href="urls.html#interfaces-for-url-manipulation"><span class="secno">2.6.7 </span>Interfaces for URL manipulation</a></li></ol></li><li><a href="urls.html#fetching-resources"><span class="secno">2.7 </span>Fetching resources</a> - <ol><li><a href="urls.html#terminology-1"><span class="secno">2.7.1 </span>Terminology</a></li><li><a href="urls.html#processing-model"><span class="secno">2.7.2 </span>Processing model</a></li><li><a href="urls.html#encrypted-http-and-related-security-concerns"><span class="secno">2.7.3 </span>Encrypted HTTP and related security concerns</a></li><li><a href="urls.html#content-type-sniffing"><span class="secno">2.7.4 </span>Determining the type of a resource</a></li><li><a href="urls.html#extracting-encodings-from-meta-elements"><span class="secno">2.7.5 </span>Extracting encodings from <code>meta</code> elements</a></li><li><a href="urls.html#cors-settings-attributes"><span class="secno">2.7.6 </span>CORS settings attributes</a></li><li><a href="urls.html#cors-enabled-fetch"><span class="secno">2.7.7 </span>CORS-enabled fetch</a></li></ol></li></ol></li></ol></div> + <ol><li><a href="urls.html#terminology-1"><span class="secno">2.7.1 </span>Terminology</a></li><li><a href="urls.html#processing-model"><span class="secno">2.7.2 </span>Processing model</a></li><li><a href="urls.html#encrypted-http-and-related-security-concerns"><span class="secno">2.7.3 </span>Encrypted HTTP and related security concerns</a></li><li><a href="urls.html#content-type-sniffing"><span class="secno">2.7.4 </span>Determining the type of a resource</a></li><li><a href="urls.html#extracting-character-encodings-from-meta-elements"><span class="secno">2.7.5 </span>Extracting character encodings from <code>meta</code> elements</a></li><li><a href="urls.html#cors-settings-attributes"><span class="secno">2.7.6 </span>CORS settings attributes</a></li><li><a href="urls.html#cors-enabled-fetch"><span class="secno">2.7.7 </span>CORS-enabled fetch</a></li></ol></li></ol></li></ol></div> <h3 id="urls"><span class="secno">2.6 </span>URLs</h3> @@ -1360,10 +1360,11 @@ <dd> - <p>First, apply any relevant requirements for redirects (such as - showing any appropriate prompts). Then, redo <i>main step</i>, - but using the target of the redirect as the resource to fetch, - rather than the original resource.</p> + <p>First, apply any relevant requirements for redirects (such as showing any appropriate + prompts). Then, redo <i>main step</i>, but using the target of the redirect as the resource to + fetch, rather than the original resource. For HTTP requests, the new request must include the + same headers as the original request, except for headers for which other requirements are + specified (such as the <code title="http-host">Host</code> header). <a href="textFieldSelection.html#refsHTTP">[HTTP]</a></p> <p class="note">The HTTP specification requires that 301, 302, and 307 redirects, when applied to methods other than the safe @@ -1424,9 +1425,9 @@ <!--ADD-TOPIC:Security--> <h4 id="encrypted-http-and-related-security-concerns"><span class="secno">2.7.3 </span>Encrypted HTTP and related security concerns</h4> - <p>Anything in this specification that refers to HTTP also applies - to HTTP-over-TLS, as represented by <a href="#url" title="url">URLs</a> - representing the <code title="">https</code> scheme.</p> + <p>Anything in this specification that refers to HTTP also applies to HTTP-over-TLS, as + represented by <a href="#url" title="url">URLs</a> representing the <code title="">https</code> scheme. + <a href="textFieldSelection.html#refsHTTPS">[HTTPS]</a></p> <p class="warning">User agents should report certificate errors to the user and must either refuse to download resources sent with @@ -1496,10 +1497,10 @@ Media Type Sniffing specification. <a href="textFieldSelection.html#refsMIMESNIFF">[MIMESNIFF]</a></p> - <h4 id="extracting-encodings-from-meta-elements"><span class="secno">2.7.5 </span>Extracting encodings from <code><a href="the-meta-element.html#the-meta-element">meta</a></code> elements</h4> + <h4 id="extracting-character-encodings-from-meta-elements"><span class="secno">2.7.5 </span>Extracting character encodings from <code><a href="the-meta-element.html#the-meta-element">meta</a></code> elements</h4> - <p>The <dfn id="algorithm-for-extracting-an-encoding-from-a-meta-element">algorithm for extracting an encoding from a - <code>meta</code> element</dfn>, given a string <var title="">s</var>, is as follows. It either returns an encoding or + <p>The <dfn id="algorithm-for-extracting-a-character-encoding-from-a-meta-element">algorithm for extracting a character encoding from a + <code>meta</code> element</dfn>, given a string <var title="">s</var>, is as follows. It either returns a character encoding or nothing.</p> <ol><!-- http://www.hixie.ch/tests/adhoc/html/parsing/encoding/all.html --><li><p>Let <var title="">position</var> be a pointer into <var title="">s</var>, initially pointing at the start of the Index: the-body-element.html =================================================================== RCS file: /sources/public/html5/spec/the-body-element.html,v retrieving revision 1.200 retrieving revision 1.201 diff -u -d -r1.200 -r1.201 --- the-body-element.html 14 Oct 2012 09:45:11 -0000 1.200 +++ the-body-element.html 14 Oct 2012 12:14:45 -0000 1.201 @@ -321,7 +321,7 @@ } </script><link href="sections.html" title="4.4 Sections" rel="prev"> <link href="spec.html#contents" title="Table of contents" rel="contents"> - <link href="the-section-element.html" title="4.4.2 The section element" rel="next"> + <link href="the-article-element.html" title="4.4.2 The article element" rel="next"> </head><body onload="fixBrokenLink();" class="split chapter"><div class="head" id="head"> <p><a href="http://www.w3.org/"><img alt="W3C" height="48" src="http://www.w3.org/Icons/w3c_home" width="72"></a></p> @@ -334,7 +334,7 @@ <div class="prev_next"> <a href="sections.html">← 4.4 Sections</a> – <a href="spec.html#contents">Table of contents</a> – - <a href="the-section-element.html">4.4.2 The section element →</a> + <a href="the-article-element.html">4.4.2 The article element →</a> </div> <h4 id="the-body-element"><span class="secno">4.4.1 </span>The <dfn><code>body</code></dfn> element</h4> Index: the-section-element.html =================================================================== RCS file: /sources/public/html5/spec/the-section-element.html,v retrieving revision 1.200 retrieving revision 1.201 diff -u -d -r1.200 -r1.201 --- the-section-element.html 14 Oct 2012 09:45:17 -0000 1.200 +++ the-section-element.html 14 Oct 2012 12:14:46 -0000 1.201 @@ -1,5 +1,5 @@ <!DOCTYPE html> -<html lang="en-US-x-Hixie"><head><meta charset="utf-8"><title>4.4.2 The section element — HTML5</title><style type="text/css"> +<html lang="en-US-x-Hixie"><head><meta charset="utf-8"><title>4.4.3 The section element — HTML5</title><style type="text/css"> .applies thead th > * { display: block; } .applies thead code { display: block; } @@ -319,9 +319,9 @@ } return null; } - </script><link href="the-body-element.html" title="4.4.1 The body element" rel="prev"> + </script><link href="the-article-element.html" title="4.4.2 The article element" rel="prev"> <link href="spec.html#contents" title="Table of contents" rel="contents"> - <link href="the-nav-element.html" title="4.4.3 The nav element" rel="next"> + <link href="the-nav-element.html" title="4.4.4 The nav element" rel="next"> </head><body onload="fixBrokenLink();" class="split chapter"><div class="head" id="head"> <p><a href="http://www.w3.org/"><img alt="W3C" height="48" src="http://www.w3.org/Icons/w3c_home" width="72"></a></p> @@ -332,12 +332,12 @@ <div class="prev_next"> - <a href="the-body-element.html">← 4.4.1 The body element</a> – + <a href="the-article-element.html">← 4.4.2 The article element</a> – <a href="spec.html#contents">Table of contents</a> – - <a href="the-nav-element.html">4.4.3 The nav element →</a> + <a href="the-nav-element.html">4.4.4 The nav element →</a> </div> - <h4 id="the-section-element"><span class="secno">4.4.2 </span>The <dfn><code>section</code></dfn> element</h4> + <h4 id="the-section-element"><span class="secno">4.4.3 </span>The <dfn><code>section</code></dfn> element</h4> <dl class="element"><dt><a href="element-definitions.html#element-dfn-categories" title="element-dfn-categories">Categories</a>:</dt> <dd><a href="content-models.html#flow-content-1">Flow content</a>.</dd> @@ -407,9 +407,9 @@ <div class="example"> - <p>Here is a graduation programme with two sections, one for the - list of people graduating, and one for the description of the - ceremony.</p> + <p>Here is a graduation programme with two sections, one for the list of people graduating, and + one for the description of the ceremony. (The markup in this example features an uncommon style + sometimes used to minimise the amount of <a href="content-models.html#inter-element-whitespace">inter-element whitespace</a>.)</p> <pre><!DOCTYPE Html> <Html Index: the-article-element.html =================================================================== RCS file: /sources/public/html5/spec/the-article-element.html,v retrieving revision 1.201 retrieving revision 1.202 diff -u -d -r1.201 -r1.202 --- the-article-element.html 14 Oct 2012 09:45:10 -0000 1.201 +++ the-article-element.html 14 Oct 2012 12:14:45 -0000 1.202 @@ -1,5 +1,5 @@ <!DOCTYPE html> -<html lang="en-US-x-Hixie"><head><meta charset="utf-8"><title>4.4.4 The article element — HTML5</title><style type="text/css"> +<html lang="en-US-x-Hixie"><head><meta charset="utf-8"><title>4.4.2 The article element — HTML5</title><style type="text/css"> .applies thead th > * { display: block; } .applies thead code { display: block; } @@ -319,9 +319,9 @@ } return null; } - </script><link href="the-nav-element.html" title="4.4.3 The nav element" rel="prev"> + </script><link href="the-body-element.html" title="4.4.1 The body element" rel="prev"> <link href="spec.html#contents" title="Table of contents" rel="contents"> - <link href="the-aside-element.html" title="4.4.5 The aside element" rel="next"> + <link href="the-section-element.html" title="4.4.3 The section element" rel="next"> </head><body onload="fixBrokenLink();" class="split chapter"><div class="head" id="head"> <p><a href="http://www.w3.org/"><img alt="W3C" height="48" src="http://www.w3.org/Icons/w3c_home" width="72"></a></p> @@ -332,12 +332,12 @@ <div class="prev_next"> - <a href="the-nav-element.html">← 4.4.3 The nav element</a> – + <a href="the-body-element.html">← 4.4.1 The body element</a> – <a href="spec.html#contents">Table of contents</a> – - <a href="the-aside-element.html">4.4.5 The aside element →</a> + <a href="the-section-element.html">4.4.3 The section element →</a> </div> - <h4 id="the-article-element"><span class="secno">4.4.4 </span>The <dfn><code>article</code></dfn> element</h4> + <h4 id="the-article-element"><span class="secno">4.4.2 </span>The <dfn><code>article</code></dfn> element</h4> <dl class="element"><dt><a href="element-definitions.html#element-dfn-categories" title="element-dfn-categories">Categories</a>:</dt> <dd><a href="content-models.html#flow-content-1">Flow content</a>.</dd> @@ -436,5 +436,4 @@ - </body></html> \ No newline at end of file Index: the-aside-element.html =================================================================== RCS file: /sources/public/html5/spec/the-aside-element.html,v retrieving revision 1.200 retrieving revision 1.201 diff -u -d -r1.200 -r1.201 --- the-aside-element.html 14 Oct 2012 09:45:10 -0000 1.200 +++ the-aside-element.html 14 Oct 2012 12:14:45 -0000 1.201 @@ -319,7 +319,7 @@ } return null; } - </script><link href="the-article-element.html" title="4.4.4 The article element" rel="prev"> + </script><link href="the-nav-element.html" title="4.4.4 The nav element" rel="prev"> <link href="spec.html#contents" title="Table of contents" rel="contents"> <link href="the-hgroup-element.html" title="4.4.7 The hgroup element" rel="next"> </head><body onload="fixBrokenLink();" class="split chapter"><div class="head" id="head"> @@ -332,7 +332,7 @@ <div class="prev_next"> - <a href="the-article-element.html">← 4.4.4 The article element</a> – + <a href="the-nav-element.html">← 4.4.4 The nav element</a> – <a href="spec.html#contents">Table of contents</a> – <a href="the-hgroup-element.html">4.4.7 The hgroup element →</a> <ol class="toc"><li><ol><li><ol><li><a href="the-aside-element.html#the-aside-element"><span class="secno">4.4.5 </span>The <code>aside</code> element</a></li><li><a href="the-aside-element.html#the-h1,-h2,-h3,-h4,-h5,-and-h6-elements"><span class="secno">4.4.6 </span>The <code>h1</code>, <code>h2</code>, <code>h3</code>, <code>h4</code>, <code>h5</code>, and <code>h6</code> elements</a></li></ol></li></ol></li></ol></div> Index: textFieldSelection.html =================================================================== RCS file: /sources/public/html5/spec/textFieldSelection.html,v retrieving revision 1.205 retrieving revision 1.206 diff -u -d -r1.205 -r1.206 --- textFieldSelection.html 14 Oct 2012 09:45:10 -0000 1.205 +++ textFieldSelection.html 14 Oct 2012 12:14:45 -0000 1.206 @@ -351,7 +351,7 @@ <ol><li><a href="textFieldSelection.html#nested-browsing-contexts"><span class="secno">5.1.1 </span>Nested browsing contexts</a> <ol><li><a href="textFieldSelection.html#navigating-nested-browsing-contexts-in-the-dom"><span class="secno">5.1.1.1 </span>Navigating nested browsing contexts in the DOM</a></li></ol></li><li><a href="textFieldSelection.html#auxiliary-browsing-contexts"><span class="secno">5.1.2 </span>Auxiliary browsing contexts</a> <ol><li><a href="textFieldSelection.html#navigating-auxiliary-browsing-contexts-in-the-dom"><span class="secno">5.1.2.1 </span>Navigating auxiliary browsing contexts in the DOM</a></li></ol></li><li><a href="textFieldSelection.html#secondary-browsing-contexts"><span class="secno">5.1.3 </span>Secondary browsing contexts</a></li><li><a href="textFieldSelection.html#security-nav"><span class="secno">5.1.4 </span>Security</a></li><li><a href="textFieldSelection.html#groupings-of-browsing-contexts"><span class="secno">5.1.5 </span>Groupings of browsing contexts</a></li><li><a href="textFieldSelection.html#browsing-context-names"><span class="secno">5.1.6 </span>Browsing context names</a></li></ol></li><li><a href="textFieldSelection.html#the-window-object"><span class="secno">5.2 </span>The <code>Window</code> object</a> - <ol><li><a href="textFieldSelection.html#security-window"><span class="secno">5.2.1 </span>Security</a></li><li><a href="textFieldSelection.html#apis-for-creating-and-navigating-browsing-contexts-by-name"><span class="secno">5.2.2 </span>APIs for creating and navigating browsing contexts by name</a></li><li><a href="textFieldSelection.html#accessing-other-browsing-contexts"><span class="secno">5.2.3 </span>Accessing other browsing contexts</a></li><li><a href="textFieldSelection.html#named-access-on-the-window-object"><span class="secno">5.2.4 </span>Named access on the <code>Window</code> object</a></li><li><a href="textFieldSelection.html#garbage-collection-and-browsing-contexts"><span class="secno">5.2.5 </span>Garbage collection and browsing contexts</a></li><li><a href="textFieldSelection.html#browser-interface-elements"><span class="secno">5.2.6 </span>Browser interface elements</a></li><li><a href="textFieldSelection.html#the-windowproxy-object"><span class="secno">5.2.7 </span>The <code>WindowPoxy</code> object</a></li></ol></li><li><a href="textFieldSelection.html#origin"><span class="secno">5.3 </span>Origin</a> + <ol><li><a href="textFieldSelection.html#security-window"><span class="secno">5.2.1 </span>Security</a></li><li><a href="textFieldSelection.html#apis-for-creating-and-navigating-browsing-contexts-by-name"><span class="secno">5.2.2 </span>APIs for creating and navigating browsing contexts by name</a></li><li><a href="textFieldSelection.html#accessing-other-browsing-contexts"><span class="secno">5.2.3 </span>Accessing other browsing contexts</a></li><li><a href="textFieldSelection.html#named-access-on-the-window-object"><span class="secno">5.2.4 </span>Named access on the <code>Window</code> object</a></li><li><a href="textFieldSelection.html#garbage-collection-and-browsing-contexts"><span class="secno">5.2.5 </span>Garbage collection and browsing contexts</a></li><li><a href="textFieldSelection.html#closing-browsing-contexts"><span class="secno">5.2.6 </span>Closing browsing contexts</a></li><li><a href="textFieldSelection.html#browser-interface-elements"><span class="secno">5.2.7 </span>Browser interfae elements</a></li><li><a href="textFieldSelection.html#the-windowproxy-object"><span class="secno">5.2.8 </span>The <code>WindowProxy</code> object</a></li></ol></li><li><a href="textFieldSelection.html#origin"><span class="secno">5.3 </span>Origin</a> <ol><li><a href="textFieldSelection.html#relaxing-the-same-origin-restriction"><span class="secno">5.3.1 </span>Relaxing the same-origin restriction</a></li></ol></li><li><a href="textFieldSelection.html#sandboxing"><span class="secno">5.4 </span>Sandboxing</a></li><li><a href="textFieldSelection.html#history"><span class="secno">5.5 </span>Session history and navigation</a> <ol><li><a href="textFieldSelection.html#the-session-history-of-browsing-contexts"><span class="secno">5.5.1 </span>The session history of browsing contexts</a></li><li><a href="textFieldSelection.html#the-history-interface"><span class="secno">5.5.2 </span>The <code>History</code> interface</a></li><li><a href="textFieldSelection.html#the-location-interface"><span class="secno">5.5.3 </span>The <code>Location</code> interface</a> <ol><li><a href="textFieldSelection.html#security-location"><span class="secno">5.5.3.1 </span>Security</a></li></ol></li><li><a href="textFieldSelection.html#history-notes"><span class="secno">5.5.4 </span>Implementation notes for session history</a></li></ol></li><li><a href="textFieldSelection.html#browsing-the-web"><span class="secno">5.6 </span>Browsing the Web</a> @@ -397,8 +397,7 @@ <ol><li><a href="textFieldSelection.html#obsolete-but-conforming-features"><span class="secno">11.1 </span>Obsolete but conforming features</a> <ol><li><a href="textFieldSelection.html#warnings-for-obsolete-but-conforming-features"><span class="secno">11.1.1 </span>Warnings for obsolete but conforming features</a></li></ol></li><li><a href="textFieldSelection.html#non-conforming-features"><span class="secno">11.2 </span>Non-conforming features</a></li><li><a href="textFieldSelection.html#requirements-for-implementations"><span class="secno">11.3 </span>Requirements for implementations</a> [...3389 lines suppressed...] - <!--REFERENCES OFF--> </dl><h2 class="no-num" id="acknowledgements">Acknowledgements</h2> <!-- ACKS --> @@ -39449,6 +39642,7 @@ Mark Pilgrim, Mark Rowe<!--bdash-->, Mark Schenk, + Mark Vickers, Mark Wilton-Jones, Martijn Wargers, Martin Atkins, @@ -39522,6 +39716,7 @@ Olivier Gendrin, Olli Pettay, oSand, <!-- from reddit --> + Pablo Flouret, Patrick H. Lauke, Patrik Persson, Paul Adenot, Index: global-attributes.html =================================================================== RCS file: /sources/public/html5/spec/global-attributes.html,v retrieving revision 1.205 retrieving revision 1.206 diff -u -d -r1.205 -r1.206 --- global-attributes.html 14 Oct 2012 09:45:07 -0000 1.205 +++ global-attributes.html 14 Oct 2012 12:14:43 -0000 1.206 @@ -728,6 +728,9 @@ <h5 id="the-translate-attribute"><span class="secno">3.2.3.4 </span>The <code title="attr-translate"><a href="#attr-translate">translate</a></code> attribute</h5> + <!-- v2: a way to translate the declensions of the word(s), but keep the actual roots the same + for examples, see https://www.w3.org/Bugs/Public/show_bug.cgi?id=17954 --> + <p>The <dfn id="attr-translate" title="attr-translate"><code>translate</code></dfn> attribute is an <a href="common-microsyntaxes.html#enumerated-attribute">enumerated attribute</a> that is used to specify whether an element's attribute values and the values of its @@ -1131,7 +1134,7 @@ contains no characters in the range U+0041 to U+005A (LATIN CAPITAL LETTER A to LATIN CAPITAL LETTER Z).</p> - <p class="note">All attributes on <a href="infrastructure.html#html-elements">HTML elements</a> in + <p class="note">All attribute names on <a href="infrastructure.html#html-elements">HTML elements</a> in <a href="infrastructure.html#html-documents">HTML documents</a> get ASCII-lowercased automatically, so the restriction on ASCII uppercase letters doesn't affect such documents.</p> Index: states-of-the-type-attribute.html =================================================================== RCS file: /sources/public/html5/spec/states-of-the-type-attribute.html,v retrieving revision 1.265 retrieving revision 1.266 diff -u -d -r1.265 -r1.266 --- states-of-the-type-attribute.html 14 Oct 2012 09:45:09 -0000 1.265 +++ states-of-the-type-attribute.html 14 Oct 2012 12:14:45 -0000 1.266 @@ -2784,6 +2784,9 @@ same <a href="association-of-controls-and-forms.html#form-owner">form owner</a>, or they both have no <a href="association-of-controls-and-forms.html#form-owner">form owner</a>.</li> + <li>Both <var title="">a</var> and <var title="">b</var> are in the + same <a href="infrastructure.html#home-subtree">home subtree</a>.</li> + <li>They both have a <code title="attr-fe-name"><a href="attributes-common-to-form-controls.html#attr-fe-name">name</a></code> attribute, their <code title="attr-fe-name"><a href="attributes-common-to-form-controls.html#attr-fe-name">name</a></code> attributes are not empty, and the value of <var title="">a</var>'s <code title="attr-fe-name"><a href="attributes-common-to-form-controls.html#attr-fe-name">name</a></code> attribute is a <a href="infrastructure.html#compatibility-caseless">compatibility Index: headings-and-sections.html =================================================================== RCS file: /sources/public/html5/spec/headings-and-sections.html,v retrieving revision 1.202 retrieving revision 1.203 diff -u -d -r1.202 -r1.203 --- headings-and-sections.html 14 Oct 2012 09:45:07 -0000 1.202 +++ headings-and-sections.html 14 Oct 2012 12:14:44 -0000 1.203 @@ -336,7 +336,7 @@ <a href="spec.html#contents">Table of contents</a> – <a href="grouping-content.html">4.5 Grouping content →</a> <ol class="toc"><li><ol><li><ol><li><a href="headings-and-sections.html#headings-and-sections"><span class="secno">4.4.11 </span>Headings and sections</a> - <ol><li><a href="headings-and-sections.html#outlines"><span class="secno">4.4.11.1 </span>Creating an outline</a></li></ol></li></ol></li></ol></li></ol></div> + <ol><li><a href="headings-and-sections.html#outlines"><span class="secno">4.4.11.1 </span>Creating an outline</a></li></ol></li><li><a href="headings-and-sections.html#usage-summary-0"><span class="secno">4.4.12 </span>Usage summary</a></li></ol></li></ol></li></ol></div> <h4 id="headings-and-sections"><span class="secno">4.4.11 </span><dfn>Headings and sections</dfn></h4> @@ -710,7 +710,7 @@ let the element being entered be the heading for the <var title="">current section</var>.</p> <p>Otherwise, if the element being entered has a - <a href="the-aside-element.html#rank">rank</a> equal to or greater than the heading of the + <a href="the-aside-element.html#rank">rank</a> equal to or higher than the heading of the last section of the <a href="#outline">outline</a> of the <var title="">current outlinee</var>, or if the heading of the last section of the <a href="#outline">outline</a> of the <var title="">current outlinee</var> is an implied heading, then create a new <a href="#concept-section" title="concept-section">section</a> and append it to the @@ -865,4 +865,107 @@ - </body></html> \ No newline at end of file + <h4 id="usage-summary-0"><span class="secno">4.4.12 </span>Usage summary</h4> + + <p><i>This section is non-normative.</i></p> + <table class="vertical-summary-table"><thead><tr><th rowspan="2">Element + </th><th>Purpose + </th></tr><tr><th>Example + </th></tr></thead><tbody><tr><td rowspan="2"><code><a href="the-body-element.html#the-body-element">body</a></code> + </td><td><!--REPRESENTS body--> + </td></tr><tr><td><pre class="example"><!DOCTYPE HTML> +<html> + <head> <title>Steve Hill's Home Page</title> </head> + <strong><a href="the-body-element.html#the-body-element"><body></a></strong> <p>Hard Trance is My Life.</p> <strong><a href="the-body-element.html#the-body-element"></body></a></strong> +</html></pre> + + </td></tr><tr><td rowspan="2"><code><a href="the-article-element.html#the-article-element">article</a></code> + </td><td><!--REPRESENTS article--> + </td></tr><tr><td><pre class="example"><strong><a href="the-article-element.html#the-article-element"><article></a></strong> + <img src="/tumblr_masqy2s5yn1rzfqbpo1_500.jpg" alt="Yellow smiley face with the caption 'masif'"> + <p>My fave Masif tee so far!</p> + <footer>Posted 2 days ago</footer> +<strong><a href="the-article-element.html#the-article-element"></article></a></strong> +<strong><a href="the-article-element.html#the-article-element"><article></a></strong> + <img src="/tumblr_m9tf6wSr6W1rzfqbpo1_500.jpg" alt=""> + <p>Happy 2nd birthday Masif Saturdays!!!</p> + <footer>Posted 3 weeks ago</footer> +<strong><a href="the-article-element.html#the-article-element"></article></a></strong></pre> + + </td></tr><tr><td rowspan="2"><code><a href="the-section-element.html#the-section-element">section</a></code> + </td><td><!--REPRESENTS section--> + </td></tr><tr><td><pre class="example"><h1>Biography</h1> +<strong><a href="the-section-element.html#the-section-element"><section></a></strong> + <h1>The facts</h1> + <p>1500+ shows, 14+ countries</p> +<strong><a href="the-section-element.html#the-section-element"></section></a></strong> +<strong><a href="the-section-element.html#the-section-element"><section></a></strong> + <h1>2010/2011 figures per year</h1> + <p>100+ shows, 8+ countries</p> +<strong><a href="the-section-element.html#the-section-element"></section></a></strong></pre> + + </td></tr><tr><td rowspan="2"><code><a href="the-nav-element.html#the-nav-element">nav</a></code> + </td><td><!--REPRESENTS nav--> + </td></tr><tr><td><pre class="example"><strong><a href="the-nav-element.html#the-nav-element"><nav></a></strong> + <p><a href="/">Home</a> + <p><a href="/biog.html">Bio</a> + <p><a href="/discog.html">Discog</a> +<strong><a href="the-nav-element.html#the-nav-element"></nav></a></strong></pre> + + </td></tr><tr><td rowspan="2"><code><a href="the-aside-element.html#the-aside-element">aside</a></code> + </td><td><!--REPRESENTS aside--> + </td></tr><tr><td><pre class="example"><h1>Music</h1> +<p>As any burner can tell you, the event has a lot of trance.</p> +<strong><a href="the-aside-element.html#the-aside-element"><aside></a></strong>You can buy the music we played at our <a href="buy.html">playlist page</a>.<strong><a href="the-aside-element.html#the-aside-element"></aside></a></strong> +<p>This year we played a kind of trance that originated in Belgium, Germany, and the Netherlands in the mid 90s.</p></pre> + + </td></tr><tr><td rowspan="2"><code><a href="the-aside-element.html#the-h1,-h2,-h3,-h4,-h5,-and-h6-elements">h1</a></code>–<code><a href="the-aside-element.html#the-h1,-h2,-h3,-h4,-h5,-and-h6-elements">h6</a></code> + </td><td>A section heading + </td></tr><tr><td><pre class="example"><strong><a href="the-aside-element.html#the-h1,-h2,-h3,-h4,-h5,-and-h6-elements"><h1></a></strong>The Guide To Music On The Playa<strong><a href="the-aside-element.html#the-h1,-h2,-h3,-h4,-h5,-and-h6-elements"></h1></a></strong> +<strong><a href="the-aside-element.html#the-h1,-h2,-h3,-h4,-h5,-and-h6-elements"><h2></a></strong>The Main Stage<strong><a href="the-aside-element.html#the-h1,-h2,-h3,-h4,-h5,-and-h6-elements"></h2></a></strong> +<p>If you want to play on a stage, you should bring one.</p> +<strong><a href="the-aside-element.html#the-h1,-h2,-h3,-h4,-h5,-and-h6-elements"><h2></a></strong>Amplified Music<strong><a href="the-aside-element.html#the-h1,-h2,-h3,-h4,-h5,-and-h6-elements"></h2></a></strong> +<p>Amplifiers up to 300W or 90dB are welcome.</p></pre> + + </td></tr><tr><td rowspan="2"><code><a href="the-hgroup-element.html#the-hgroup-element">hgroup</a></code> + </td><td><!--REPRESENTS hgroup--> + </td></tr><tr><td><pre class="example"><strong><a href="the-hgroup-element.html#the-hgroup-element"><hgroup></a></strong> + <h1>Burning Music</h1> + <h2>The Guide To Music On The Playa</h2> +<strong><a href="the-hgroup-element.html#the-hgroup-element"></hgroup></a></strong> +<section> + <strong><a href="the-hgroup-element.html#the-hgroup-element"><hgroup></a></strong> + <h1>Main Stage</h1> + <h2>The Fiction Of A Music Festival</h2> + <strong><a href="the-hgroup-element.html#the-hgroup-element"></hgroup></a></strong> + <p>If you want to play on a stage, you should bring one.</p> +</section> +<section> + <strong><a href="the-hgroup-element.html#the-hgroup-element"><hgroup></a></strong> + <h1>Loudness!</h1> + <h2>Questions About Amplified Music</h2> + <strong><a href="the-hgroup-element.html#the-hgroup-element"></hgroup></a></strong> + <p>Amplifiers up to 300W or 90dB are welcome.</p> +</section></pre> + + </td></tr><tr><td rowspan="2"><code><a href="the-header-element.html#the-header-element">header</a></code> + </td><td><!--REPRESENTS header--> + </td></tr><tr><td><pre class="example"><article> + <strong><a href="the-header-element.html#the-header-element"><header></a></strong> + <h1>Hard Trance is My Life</h1> + <p>By DJ Steve Hill and Technikal</p> + <strong><a href="the-header-element.html#the-header-element"></header></a></strong> + <p>The album with the amusing punctuation has red artwork.</p> +</article></pre> + + </td></tr><tr><td rowspan="2"><code><a href="the-footer-element.html#the-footer-element">footer</a></code> + </td><td><!--REPRESENTS footer--> + </td></tr><tr><td><pre class="example"><article> + <h1>Hard Trance is My Life</h1> + <p>The album with the amusing punctuation has red artwork.</p> + <strong><a href="the-footer-element.html#the-footer-element"><footer></a></strong> + <p>Artists: DJ Steve Hill and Technikal</p> + <strong><a href="the-footer-element.html#the-footer-element"></footer></a></strong> +</article></pre> + + </td></tr></tbody></table></body></html> \ No newline at end of file Index: the-nav-element.html =================================================================== RCS file: /sources/public/html5/spec/the-nav-element.html,v retrieving revision 1.201 retrieving revision 1.202 diff -u -d -r1.201 -r1.202 --- the-nav-element.html 14 Oct 2012 09:45:16 -0000 1.201 +++ the-nav-element.html 14 Oct 2012 12:14:46 -0000 1.202 @@ -1,5 +1,5 @@ <!DOCTYPE html> -<html lang="en-US-x-Hixie"><head><meta charset="utf-8"><title>4.4.3 The nav element — HTML5</title><style type="text/css"> +<html lang="en-US-x-Hixie"><head><meta charset="utf-8"><title>4.4.4 The nav element — HTML5</title><style type="text/css"> .applies thead th > * { display: block; } .applies thead code { display: block; } @@ -319,9 +319,9 @@ } return null; } - </script><link href="the-section-element.html" title="4.4.2 The section element" rel="prev"> + </script><link href="the-section-element.html" title="4.4.3 The section element" rel="prev"> <link href="spec.html#contents" title="Table of contents" rel="contents"> - <link href="the-article-element.html" title="4.4.4 The article element" rel="next"> + <link href="the-aside-element.html" title="4.4.5 The aside element" rel="next"> </head><body onload="fixBrokenLink();" class="split chapter"><div class="head" id="head"> <p><a href="http://www.w3.org/"><img alt="W3C" height="48" src="http://www.w3.org/Icons/w3c_home" width="72"></a></p> @@ -332,12 +332,12 @@ <div class="prev_next"> - <a href="the-section-element.html">← 4.4.2 The section element</a> – + <a href="the-section-element.html">← 4.4.3 The section element</a> – <a href="spec.html#contents">Table of contents</a> – - <a href="the-article-element.html">4.4.4 The article element →</a> + <a href="the-aside-element.html">4.4.5 The aside element →</a> </div> - <h4 id="the-nav-element"><span class="secno">4.4.3 </span>The <dfn><code>nav</code></dfn> element</h4> + <h4 id="the-nav-element"><span class="secno">4.4.4 </span>The <dfn><code>nav</code></dfn> element</h4> <dl class="element"><dt><a href="element-definitions.html#element-dfn-categories" title="element-dfn-categories">Categories</a>:</dt> <dd><a href="content-models.html#flow-content-1">Flow content</a>.</dd> @@ -500,4 +500,5 @@ </div> + </body></html> \ No newline at end of file Index: the-html-element.html =================================================================== RCS file: /sources/public/html5/spec/the-html-element.html,v retrieving revision 1.200 retrieving revision 1.201 diff -u -d -r1.200 -r1.201 --- the-html-element.html 14 Oct 2012 09:45:15 -0000 1.200 +++ the-html-element.html 14 Oct 2012 12:14:45 -0000 1.201 @@ -357,6 +357,11 @@ </dl><!--TOPIC:HTML--><p>The <code><a href="#the-html-element">html</a></code> element <a href="textFieldSelection.html#represents">represents</a> the root of an HTML document.</p> + <p>Authors are encouraged to specify a <code title="attr-lang"><a href="global-attributes.html#attr-lang">lang</a></code> attribute on the root + <code><a href="#the-html-element">html</a></code> element, giving the document's language. This aids speech synthesis tools to + determine what pronunciations to use, translation tools to determine what rules to use, and so + forth.</p> + <!--TOPIC:Offline Web Applications--> <p>The <dfn id="attr-html-manifest" title="attr-html-manifest"><code>manifest</code></dfn> attribute gives the address of the document's <a href="textFieldSelection.html#application-cache">application Index: wai-aria.html =================================================================== RCS file: /sources/public/html5/spec/wai-aria.html,v retrieving revision 1.201 retrieving revision 1.202 diff -u -d -r1.201 -r1.202 --- wai-aria.html 14 Oct 2012 09:45:19 -0000 1.201 +++ wai-aria.html 14 Oct 2012 12:14:46 -0000 1.202 @@ -649,8 +649,8 @@ </td><td>Role must be either <code title="attr-aria-role-article">article</code>, <code title="attr-aria-role-document">document</code>, <code title="attr-aria-role-application">application</code>, or <code title="attr-aria-role-main">main</code> </td></tr><tr><td><code><a href="the-aside-element.html#the-aside-element">aside</a></code> element - </td><td><code title="attr-aria-role-note">note</code> role - </td><td>Role must be either <code title="attr-aria-role-note">note</code>, <code title="attr-aria-role-complementary">complementary</code>, or <code title="attr-aria-role-search">search</code> + </td><td><code title="attr-aria-role-complementary">complementary</code> role + </td><td>Role must be either <code title="attr-aria-role-complementary">complementary</code>, <code title="attr-aria-role-note">note</code>, or <code title="attr-aria-role-search">search</code> </td></tr><tr><td><code><a href="the-audio-element.html#the-audio-element">audio</a></code> element </td><td><a href="#concept-role-none" title="concept-role-none">No role</a> Index: spec.html =================================================================== RCS file: /sources/public/html5/spec/spec.html,v retrieving revision 1.2050 retrieving revision 1.2051 diff -u -d -r1.2050 -r1.2051 --- spec.html 14 Oct 2012 09:45:09 -0000 1.2050 +++ spec.html 14 Oct 2012 12:14:44 -0000 1.2051 @@ -549,7 +549,7 @@ <li><a href="urls.html#processing-model"><span class="secno">2.7.2 </span>Processing model</a></li> <li><a href="urls.html#encrypted-http-and-related-security-concerns"><span class="secno">2.7.3 </span>Encrypted HTTP and related security concerns</a></li> <li><a href="urls.html#content-type-sniffing"><span class="secno">2.7.4 </span>Determining the type of a resource</a></li> - <li><a href="urls.html#extracting-encodings-from-meta-elements"><span class="secno">2.7.5 </span>Extracting encodings from <code>meta</code> elements</a></li> + <li><a href="urls.html#extracting-character-encodings-from-meta-elements"><span class="secno">2.7.5 </span>Extracting character encodings from <code>meta</code> elements</a></li> <li><a href="urls.html#cors-settings-attributes"><span class="secno">2.7.6 </span>CORS settings attributes</a></li> <li><a href="urls.html#cors-enabled-fetch"><span class="secno">2.7.7 </span>CORS-enabled fetch</a></li></ol></li> <li><a href="common-dom-interfaces.html#common-dom-interfaces"><span class="secno">2.8 </span>Common DOM interfaces</a> @@ -637,9 +637,9 @@ <li><a href="the-noscript-element.html#the-noscript-element"><span class="secno">4.3.2 </span>The <code>noscript</code> element</a></li></ol></li> <li><a href="sections.html#sections"><span class="secno">4.4 </span>Sections</a> <ol class="toc"><li><a href="the-body-element.html#the-body-element"><span class="secno">4.4.1 </span>The <code>body</code> element</a></li> - <li><a href="the-section-element.html#the-section-element"><span class="secno">4.4.2 </span>The <code>section</code> element</a></li> - <li><a href="the-nav-element.html#the-nav-element"><span class="secno">4.4.3 </span>The <code>nav</code> element</a></li> - <li><a href="the-article-element.html#the-article-element"><span class="secno">4.4.4 </span>The <code>article</code> element</a></li> + <li><a href="the-article-element.html#the-article-element"><span class="secno">4.4.2 </span>The <code>article</code> element</a></li> + <li><a href="the-section-element.html#the-section-element"><span class="secno">4.4.3 </span>The <code>section</code> element</a></li> + <li><a href="the-nav-element.html#the-nav-element"><span class="secno">4.4.4 </span>The <code>nav</code> element</a></li> <li><a href="the-aside-element.html#the-aside-element"><span class="secno">4.4.5 </span>The <code>aside</code> element</a></li> <li><a href="the-aside-element.html#the-h1,-h2,-h3,-h4,-h5,-and-h6-elements"><span class="secno">4.4.6 </span>The <code>h1</code>, <code>h2</code>, <code>h3</code>, <code>h4</code>, <code>h5</code>, and <code>h6</code> elements</a></li> <li><a href="the-hgroup-element.html#the-hgroup-element"><span class="secno">4.4.7 </span>The <code>hgroup</code> element</a></li> @@ -647,7 +647,8 @@ <li><a href="the-footer-element.html#the-footer-element"><span class="secno">4.4.9 </span>The <code>footer</code> element</a></li> <li><a href="the-address-element.html#the-address-element"><span class="secno">4.4.10 </span>The <code>address</code> element</a></li> <li><a href="headings-and-sections.html#headings-and-sections"><span class="secno">4.4.11 </span>Headings and sections</a> - <ol class="toc"><li><a href="headings-and-sections.html#outlines"><span class="secno">4.4.11.1 </span>Creating an outline</a></li></ol></li></ol></li> + <ol class="toc"><li><a href="headings-and-sections.html#outlines"><span class="secno">4.4.11.1 </span>Creating an outline</a></li></ol></li> + <li><a href="headings-and-sections.html#usage-summary-0"><span class="secno">4.4.12 </span>Usage summary</a></li></ol></li> <li><a href="grouping-content.html#grouping-content"><span class="secno">4.5 </span>Grouping content</a> <ol class="toc"><li><a href="the-p-element.html#the-p-element"><span class="secno">4.5.1 </span>The <code>p</code> element</a></li> <li><a href="the-hr-element.html#the-hr-element"><span class="secno">4.5.2 </span>The <code>hr</code> element</a></li> @@ -940,8 +941,9 @@ <li><a href="textFieldSelection.html#accessing-other-browsing-contexts"><span class="secno">5.2.3 </span>Accessing other browsing contexts</a></li> <li><a href="textFieldSelection.html#named-access-on-the-window-object"><span class="secno">5.2.4 </span>Named access on the <code>Window</code> object</a></li> <li><a href="textFieldSelection.html#garbage-collection-and-browsing-contexts"><span class="secno">5.2.5 </span>Garbage collection and browsing contexts</a></li> - <li><a href="textFieldSelection.html#browser-interface-elements"><span class="secno">5.2.6 </span>Browser interface elements</a></li> - <li><a href="textFieldSelection.html#the-windowproxy-object"><span class="secno">5.2.7 </span>The <code>WindowProxy</code> object</a></li></ol></li> + <li><a href="textFieldSelection.html#closing-browsing-contexts"><span class="secno">5.2.6 </span>Closing browsing contexts</a></li> + <li><a href="textFieldSelection.html#browser-interface-elements"><span class="secno">5.2.7 </span>Browser interface elements</a></li> + <li><a href="textFieldSelection.html#the-windowproxy-object"><span class="secno">5.2.8 </span>The <code>WindowProxy</code> object</a></li></ol></li> <li><a href="textFieldSelection.html#origin"><span class="secno">5.3 </span>Origin</a> <ol class="toc"><li><a href="textFieldSelection.html#relaxing-the-same-origin-restriction"><span class="secno">5.3.1 </span>Relaxing the same-origin restriction</a></li></ol></li> <li><a href="textFieldSelection.html#sandboxing"><span class="secno">5.4 </span>Sandboxing</a></li> @@ -1252,9 +1254,6 @@ <li><a href="textFieldSelection.html#application/xhtml+xml"><span class="secno">12.3 </span><code>application/xhtml+xml</code></a></li> <li><a href="textFieldSelection.html#application/x-www-form-urlencoded"><span class="secno">12.4 </span><code>application/x-www-form-urlencoded</code></a></li> <li><a href="textFieldSelection.html#text/cache-manifest"><span class="secno">12.5 </span><code>text/cache-manifest</code></a></li> - <li><a href="textFieldSelection.html#web+-scheme-prefix"><span class="secno">12.6 </span><code>web+</code> scheme prefix</a></li></ol></li> - <li><a class="no-num" href="textFieldSelection.html#index">Index</a> - <ol class="toc"><li><a class="no-num" href="textFieldSelection.html#elements-1">Elements</a></li> <li><a class="no-num" href="textFieldSelection.html#element-content-categories">Element content categories</a></li> <li><a class="no-num" href="textFieldSelection.html#attributes-1">Attributes</a></li> <li><a class="no-num" href="textFieldSelection.html#element-interfaces">Element Interfaces</a></li> Index: the-meta-element.html =================================================================== RCS file: /sources/public/html5/spec/the-meta-element.html,v retrieving revision 1.205 retrieving revision 1.206 diff -u -d -r1.205 -r1.206 --- the-meta-element.html 14 Oct 2012 09:45:16 -0000 1.205 +++ the-meta-element.html 14 Oct 2012 12:14:46 -0000 1.206 @@ -1181,7 +1181,7 @@ <p class="note">A character encoding declaration is required (either in the <a href="urls.html#content-type" title="Content-Type">Content-Type metadata</a> or - explicitly in the file) even if the encoding is US-ASCII, because an + explicitly in the file) even if the encoding is US-ASCII, because a character encoding is needed to process non-ASCII characters entered by the user in forms, in URLs generated by scripts, and so forth.</p>
Received on Sunday, 14 October 2012 12:14:56 UTC