Re: <script src=javascript:"..."> should do nothing

• From: Boris Zbarsky <bzbarsky@MIT.EDU>
• Date: Mon, 11 Aug 2008 19:43:45 -0400
• To: Justin James <j_james@mindspring.com>
• CC: "'Toby A Inkster'" <tai@g5n.co.uk>, public-html@w3.org
• Message-ID: <48A0CEB1.80002@mit.edu>

Justin James wrote:
> If other @src's allow javascript:, why *wouldn't* we allow it in <script>?

The spec currently does.

-Boris

Received on Monday, 11 August 2008 23:44:35 UTC