Re: javascript URIs on stylesheets/redirections from gaz Heyes on 2010-01-26 (public-web-security@w3.org from January 2010)

From: gaz Heyes <gazheyes@gmail.com>
Date: Tue, 26 Jan 2010 10:38:06 +0000
To: Ian Hickson <ian@hixie.ch>
Cc: sird@rckc.at, public-web-security@w3.org
Message-ID: <252dd75b1001260238kae9a955h776341903c8331eb@mail.gmail.com>

2010/1/26 Ian Hickson <ian@hixie.ch>

> Again, whether it executes or not is not a matter for the HTML5 spec to
> define; I just want to make sure that if it _does_, the origin is
> well-defined.
>

Why not? What possible use could it be to execute javascript from that
context? If we define past mistakes at spec. level then those mistakes
aren't likely to be repeated no?

Received on Tuesday, 26 January 2010 10:38:53 UTC