W3C home > Mailing lists > Public > public-html@w3.org > May 2009

RE: HTML interpreter vs. HTML user agent

From: Andi Sidwell <andi@takkaria.org>
Date: Sun, 31 May 2009 22:39:31 +0100
Message-ID: <4A22F913.2070301@takkaria.org>
To: public-html@w3.org
Larry Masinter wrote:
> Not sure I understand -- does web mail have to turn off scripting?
> Is the only HTML that is suitable for transmission by email to
> a web mail user one that doesn't rely on scripting?
> How can I email HTML which uses <canvas>, if scripting is turned
> off for web mail users?

I would suggest the only safe thing for webmail to do would be to parse 
the HTML document in question and whitelist elements that are known to 
be safe.  As a result, <canvas> would (hopefully) not work.

Received on Sunday, 31 May 2009 21:39:14 UTC

This archive was generated by hypermail 2.4.0 : Saturday, 9 October 2021 18:44:47 UTC