- From: poot <cvsmail@w3.org>
- Date: Tue, 22 Jul 2008 10:35:48 +0900 (JST)
- To: public-html-diffs@w3.org
Make the handling of websocket-origin stricter (whatwg r1896) (changed by: Ian Hickson) Diffs for this change per section: Headers processing: If there is not exactly one entry in the headers list whose name is "websocket-origin", or if there is not exactly one entry in the headers list whose name is "websocket-location", or if there are any entries in the headers list whose names are the empty string, then fail the Web Socket connection and abort these steps. http://people.w3.org/mike/diffs/html5/spec/Overview.1.1085.html#ws-ua-headers-processing Current content per affected section: http://dev.w3.org/html5/spec/Overview.html#ws-ua-headers-processing Previously published WD content per affected section: http://www.w3.org/TR/2008/WD-html5-20080610/single-page/#ws-ua-headers-processing Cumulative diff: http://people.w3.org/mike/diffs/html5/spec/Overview.diff.html http://dev.w3.org/cvsweb/html5/spec/Overview.html?r1=1.1084&r2=1.1085&f=h http://html5.org/tools/web-apps-tracker?from=1895&to=1896 =================================================================== RCS file: /sources/public/html5/spec/Overview.html,v retrieving revision 1.1084 retrieving revision 1.1085 diff -u -d -r1.1084 -r1.1085 --- Overview.html 22 Jul 2008 01:13:32 -0000 1.1084 +++ Overview.html 22 Jul 2008 01:21:50 -0000 1.1085 @@ -42144,12 +42144,12 @@ <dl class=switch> <dt>If the entry's name is "<code title="">websocket-origin</code>" - <dd>Assume the value is a <a href="#url">URL</a>. If the value does not - have the <a href="#same-origin">same origin</a> as the script that - invoked the <code title=dom-WebSocket><a - href="#websocket1">WebSocket()</a></code> constructor, then <a - href="#fail-the">fail the Web Socket connection</a> and abort these - steps. + <dd>If the value is not exactly equal to the <a href="#ascii" + title="ASCII serialization of an origin">ASCII serialization</a> of the + <a href="#origin0">origin</a> of the script that invoked the <code + title=dom-WebSocket><a href="#websocket1">WebSocket()</a></code> + constructor, then <a href="#fail-the">fail the Web Socket + connection</a> and abort these steps. <dt>If the entry's name is "<code title="">websocket-location</code>"
Received on Tuesday, 22 July 2008 01:36:27 UTC