Re: img issue: should we restrict the URI from Adam Roben on 2008-01-25 (public-html@w3.org from January 2008)

From: Adam Roben <aroben@apple.com>
Date: Fri, 25 Jan 2008 12:55:14 -0500
To: Boris Zbarsky <bzbarsky@MIT.EDU>
Cc: "Dr. Olaf Hoffmann" <Dr.O.Hoffmann@gmx.de>, public-html@w3.org
Message-id: <C0FFD375-D9C4-4033-BB2E-BDE6AAA630B5@apple.com>

On Jan 25, 2008, at 11:40 AM, Boris Zbarsky wrote:

> In particular, the content of an <img> is guaranteed to be static  
> content in the sense that it won't run JavaScript (though I do  
> wonder how Opera's SVG and Safari's PDF handling play there; I would  
> hope they disable JavaScript when embedding SVG and PDF via <img>).

WebKit disables JavaScript within SVG content used as an image (<img>,  
background-image, etc.). I don't know the answer for PDF content used  
as an image.

-Adam

Received on Friday, 25 January 2008 17:55:36 UTC