- From: poot <cvsmail@w3.org>
- Date: Tue, 28 Apr 2009 10:37:41 +0900 (JST)
- To: public-html-diffs@w3.org
Disambiguate what document's load event is delayed. (credit: roc) (whatwg r3007) list of scripts that will execute as soon as possible http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#list-of-scripts-that-will-execute-as-soon-as-possible name http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#attr-iframe-name poster frame http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#poster-frame autoplaying flag http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#autoplaying-flag alt http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#attr-img-alt stops parsing http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#stop-parsing poster http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#attr-video-poster sandbox http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#attr-iframe-sandbox When the sandboxed plugins browsing context flag is set on the browsing context for which the embed element's document is the active document, then the user agent must render the embed element in a manner that conveys that the plugin was disabled. The user agent may offer the user the option to override the sandbox and instantiate the plugin anyway; if the user invokes such an option, the user agent must act as if the sandboxed plugins browsing context flag was not set for the purposes of this element. http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#sandboxPluginEmbed type of the content http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#concept-embed-type name http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#attr-object-name load() http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#dom-media-load delaying-the-load-event flag http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#delaying-the-load-event-flag src http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#attr-input-src Executing a script block http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#executing-a-script-block delays the load event http://people.w3.org/mike/diffs/html5/spec/Overview.1.2170.html#delay-the-load-event http://people.w3.org/mike/diffs/html5/spec/Overview.diff.html http://dev.w3.org/cvsweb/html5/spec/Overview.html?r1=1.2169&r2=1.2170&f=h http://html5.org/tools/web-apps-tracker?from=3006&to=3007 =================================================================== RCS file: /sources/public/html5/spec/Overview.html,v retrieving revision 1.2169 retrieving revision 1.2170 diff -u -d -r1.2169 -r1.2170 --- Overview.html 28 Apr 2009 01:18:17 -0000 1.2169 +++ Overview.html 28 Apr 2009 01:36:08 -0000 1.2170 @@ -10242,7 +10242,8 @@ </ol></dd> - </dl><p>Fetching an external script must <a href="#delay-the-load-event">delay the <code title="event-load">load</code> event</a>.</p> + </dl><p>Fetching an external script must <a href="#delay-the-load-event">delay the load + event</a> of the element's document.</p> <p><dfn id="executing-a-script-block" title="executing a script block">Executing a script block</dfn>: When the steps above require that the script block be @@ -14620,7 +14621,8 @@ the <i>base URI of the element</i> is the same as <a href="#the-document-s-address">the document's address</a>.</p> - <p>Fetching the image must <a href="#delay-the-load-event">delay the <code title="event-load">load</code> event</a>.</p> + <p>Fetching the image must <a href="#delay-the-load-event">delay the load event</a> of the + element's document.</p> <p class="warning">This, unfortunately, can be used to perform a rudimentary port scan of the user's local network (especially in @@ -15788,14 +15790,15 @@ <code title="event-error"><a href="#event-error">error</a></code> at the element instead.</p> <p>When there is an active parser in the <code><a href="#the-iframe-element">iframe</a></code>, and - when anything in the <code><a href="#the-iframe-element">iframe</a></code> that is <a href="#delay-the-load-event" title="delay - the load event">delaying the <code title="event-load">load</code> - event</a> in the <code><a href="#the-iframe-element">iframe</a></code>'s <a href="#browsing-context">browsing - context</a>, the <code><a href="#the-iframe-element">iframe</a></code> must <a href="#delay-the-load-event">delay the <code title="event-load">load</code> event</a>.</p> + when anything in the <code><a href="#the-iframe-element">iframe</a></code> is <a href="#delay-the-load-event" title="delay the + load event">delaying the load event</a> of the + <code><a href="#the-iframe-element">iframe</a></code>'s <a href="#browsing-context">browsing context</a>'s <a href="#active-document">active + document</a>, the <code><a href="#the-iframe-element">iframe</a></code> must <a href="#delay-the-load-event">delay the load + event</a> of its document.</p> <p class="note">If, during the handling of the <code title="event-load"><a href="#event-load">load</a></code> event, the <a href="#browsing-context">browsing context</a> in the <code><a href="#the-iframe-element">iframe</a></code> is again <a href="#navigate" title="navigate">navigated</a>, that will further <a href="#delay-the-load-event">delay the - <code title="event-load">load</code> event</a>.</p> + load event</a>.</p> </div><hr><p>The <dfn id="attr-iframe-sandbox" title="attr-iframe-sandbox"><code>sandbox</code></dfn> attribute, when specified, enables a set of extra restrictions on @@ -16194,7 +16197,8 @@ previously instantiated plugin for the element. <!-- Note that this doesn't happen when the base URL changes. --></p> - <p>Fetching the resource must <a href="#delay-the-load-event">delay the <code title="event-load">load</code> event</a>.</p> + <p>Fetching the resource must <a href="#delay-the-load-event">delay the load event</a> of + the element's document.</p> <p>The <dfn id="concept-embed-type" title="concept-embed-type">type of the content</dfn> being embedded is defined as follows:</p> @@ -16397,7 +16401,8 @@ <p>If that is successful, <a href="#fetch">fetch</a> the resulting <a href="#absolute-url">absolute URL</a>.</p> - <p>The fetching of the resource must <a href="#delay-the-load-event">delay the <code title="event-load">load</code> event</a>.</p> + <p>The fetching of the resource must <a href="#delay-the-load-event">delay the load + event</a> of the element's document.</p> </li> @@ -16753,9 +16758,8 @@ is set, its value must be <a href="#resolve-a-url" title="resolve a url">resolved</a> relative to the element, and if that is successful, the resulting <a href="#absolute-url">absolute URL</a> must be <a href="#fetch" title="fetch">fetched</a>; this must <a href="#delay-the-load-event">delay the load - event</a>. The <dfn id="poster-frame">poster frame</dfn> is then the image obtained - from that resource, if any.</span></p><!-- thus it is unaffected by - changes to the base URL. --><p class="note">The image given by the <code title="attr-video-poster"><a href="#attr-video-poster">poster</a></code> attribute, the <i><a href="#poster-frame">poster + event</a> of the element's document. The <dfn id="poster-frame">poster frame</dfn> + is then the image obtained from that resource, if any.</span></p><!-- thus it is unaffected by changes to the base URL. --><p class="note">The image given by the <code title="attr-video-poster"><a href="#attr-video-poster">poster</a></code> attribute, the <i><a href="#poster-frame">poster frame</a></i>, is intended to be a representative frame of the video (typically one of the first non-blank frames) that gives the user an idea of what the video is like.<div class="impl"> @@ -17462,7 +17466,8 @@ <dfn id="autoplaying-flag">autoplaying flag</dfn>, which must begin in the true state, and a <dfn id="delaying-the-load-event-flag">delaying-the-load-event flag</dfn>, which must begin in the false state. While the <a href="#delaying-the-load-event-flag">delaying-the-load-event flag</a> is - true, the element must <a href="#delay-the-load-event">delay the load event</a>.</p> + true, the element must <a href="#delay-the-load-event">delay the load event</a> of its + document.</p> <p>When the <dfn id="dom-media-load" title="dom-media-load"><code>load()</code></dfn> method on a <a href="#media-element">media element</a> is invoked, the user agent @@ -28045,7 +28050,8 @@ <code title="attr-input-src"><a href="#attr-input-src">src</a></code> attribute is set or changed.</li> <!-- XXX define changed --> - </ul><p>Fetching the image must <a href="#delay-the-load-event">delay the <code title="event-load">load</code> event</a>.</p> + </ul><p>Fetching the image must <a href="#delay-the-load-event">delay the load event</a> of the + element's document.</p> <p>If the image was successfully obtained, with no network errors, and the image's type is a supported image type, and the image is a @@ -52742,8 +52748,8 @@ <code>Document</code>.</p> <p>Once everything that <dfn id="delay-the-load-event" title="delay the load event">delays the - load event</dfn> has completed, the user agent must run the - following steps:</p> + load event</dfn> of the document has completed, the user agent must + run the following steps:</p> <ol><li><a href="#queue-a-task">Queue a task</a> to set the <a href="#current-document-readiness">current document readiness</a> to "complete".</li> @@ -52766,7 +52772,8 @@ </ol><p>The <a href="#task-source">task source</a> for these tasks is the <a href="#dom-manipulation-task-source">DOM manipulation task source</a>.</p> - <!-- XXX make sure things "delay the load event" --> + <!-- XXX make sure things "delay the load event", e.g. applet and + object element's frame contents --> <p class="XXX">delaying the load event for things like image loads allows for intranet port scans (even without
Received on Tuesday, 28 April 2009 01:38:18 UTC