hixie: Allow port banning in WebSocket. (whatwg r3483)

hixie: Allow port banning in WebSocket. (whatwg r3483)

http://dev.w3.org/cvsweb/html5/websockets/Overview.html?r1=1.92&r2=1.93&f=h
http://html5.org/tools/web-apps-tracker?from=3482&to=3483

===================================================================
RCS file: /sources/public/html5/websockets/Overview.html,v
retrieving revision 1.92
retrieving revision 1.93
diff -u -d -r1.92 -r1.93
--- Overview.html 28 Jul 2009 21:55:17 -0000 1.92
+++ Overview.html 28 Jul 2009 22:13:00 -0000 1.93
@@ -360,9 +360,6 @@
    U+0021 .. U+007E, then throw a <code>SYNTAX_ERR</code>
    exception.</li>
 
-   <li><p>Return a new <code><a href="#websocket">WebSocket</a></code> object, and continue
-   these steps in the background (without blocking scripts).</li>
-
    <li><p>Let <var title="">origin</var> be the <span title="ASCII
    serialization of an origin">ASCII serialization</span> of the
    <span>origin</span> of the script that invoked the <code title="dom-WebSocket"><a href="#dom-websocket">WebSocket()</a></code> constructor,
@@ -378,6 +375,14 @@
    <li><p>If <var title="">url</var> has a <span title="url-port">&lt;port&gt;</span> component, then let <var title="">port</var> be that component's value; otherwise, there is
    no explicit <var title="">port</var>.</li>
 
+   <li><p>If there is an explicit <var title="">port</var> and the
+   user agent is configured to block access to that port, then throw a
+   <span>security exception</span>. (User agents typically block
+   access to well-known ports like SMTP.)</li>
+   <!--
+    e.g. http://www.mozilla.org/projects/netlib/PortBanning.html
+   -->
+
    <li><p>Let <var title="">resource name</var> be the value of the
    <span title="url-path">&lt;path&gt;</span> component (which might
    be empty) of <var title="">url</var>.</li>
@@ -389,6 +394,9 @@
    single U+003F QUESTION MARK (?) character to <var title="">resource
    name</var>, followed by the value of the <span title="url-query">&lt;query&gt;</span> component.</li>
 
+   <li><p>Return a new <code><a href="#websocket">WebSocket</a></code> object, and continue
+   these steps in the background (without blocking scripts).</li>
+
    <li>
 
     <p><span>Establish a Web Socket connection</span> to a host <var title="">host</var>, on port <var title="">port</var> (if one was

Received on Tuesday, 28 July 2009 22:13:58 UTC