- From: poot <cvsmail@w3.org>
- Date: Tue, 22 Jul 2008 10:35:48 +0900 (JST)
- To: public-html-diffs@w3.org
Make the handling of websocket-origin stricter (whatwg r1896) (changed
by: Ian Hickson)
Diffs for this change per section:
Headers processing: If there is not exactly one entry in the headers list whose name is "websocket-origin", or if there is not exactly one entry in the headers list whose name is "websocket-location", or if there are any entries in the headers list whose names are the empty string, then fail the Web Socket connection and abort these steps.
http://people.w3.org/mike/diffs/html5/spec/Overview.1.1085.html#ws-ua-headers-processing
Current content per affected section:
http://dev.w3.org/html5/spec/Overview.html#ws-ua-headers-processing
Previously published WD content per affected section:
http://www.w3.org/TR/2008/WD-html5-20080610/single-page/#ws-ua-headers-processing
Cumulative diff: http://people.w3.org/mike/diffs/html5/spec/Overview.diff.html
http://dev.w3.org/cvsweb/html5/spec/Overview.html?r1=1.1084&r2=1.1085&f=h
http://html5.org/tools/web-apps-tracker?from=1895&to=1896
===================================================================
RCS file: /sources/public/html5/spec/Overview.html,v
retrieving revision 1.1084
retrieving revision 1.1085
diff -u -d -r1.1084 -r1.1085
--- Overview.html 22 Jul 2008 01:13:32 -0000 1.1084
+++ Overview.html 22 Jul 2008 01:21:50 -0000 1.1085
@@ -42144,12 +42144,12 @@
<dl class=switch>
<dt>If the entry's name is "<code title="">websocket-origin</code>"
- <dd>Assume the value is a <a href="#url">URL</a>. If the value does not
- have the <a href="#same-origin">same origin</a> as the script that
- invoked the <code title=dom-WebSocket><a
- href="#websocket1">WebSocket()</a></code> constructor, then <a
- href="#fail-the">fail the Web Socket connection</a> and abort these
- steps.
+ <dd>If the value is not exactly equal to the <a href="#ascii"
+ title="ASCII serialization of an origin">ASCII serialization</a> of the
+ <a href="#origin0">origin</a> of the script that invoked the <code
+ title=dom-WebSocket><a href="#websocket1">WebSocket()</a></code>
+ constructor, then <a href="#fail-the">fail the Web Socket
+ connection</a> and abort these steps.
<dt>If the entry's name is "<code title="">websocket-location</code>"
Received on Tuesday, 22 July 2008 01:36:27 UTC