Re: Ajax Back/Forward History problem document state by document.save()

I have to agree with Sylvain, that I think users would evolve as web
application do and the need for that back button might become
unnecessary. Of course in the mean time there should be something to
help the who still want to use the back button, but as fast as Ajax is
growing, users may evolve before new technology can be implemented.

My big concern with both document.save and pushState is security. The
pushState method has a recommendation for security, "It is suggested
that to avoid letting a page "hijack" the history navigation
facilities of a UA by abusing pushState(), the UA provide the user
with a way to jump back to the previous page (rather than just going
back to the previous state).", but if this is not implemented,
malicious developers could take control of the users navigation.

The document.save method has the added risk that someone could put
URI's in the history to pages the user never visited and dose not want
to visit without them knowing.

Kenny

Received on Monday, 21 November 2005 16:00:01 UTC