[Bug 25924] [Imports]: The spec. is not very specific about the edge cases of the load

https://www.w3.org/Bugs/Public/show_bug.cgi?id=25924

Gabor Krizsanits <gkrizsanits@mozilla.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |morrita@google.com

--- Comment #5 from Gabor Krizsanits <gkrizsanits@mozilla.com> ---
(In reply to Anne from comment #4)
> We should probably actually clarify data URLs. I suspect they should not be
> allowed here as they would be able to execute scripts. I need to add the
> flag proposed by Jonas in
> http://lists.w3.org/Archives/Public/public-webapps/2014AprJun/0696.html and
> HTML imports should probably not set it.

Why is script execution a concern exactly? I also don't quite get the example
from Jonas, since data urls should only work if the redirect count is 0, no?

> 
> Is the text/html requirement stated?
> 

It is not actually, the spec only states that the default type is text/html. I
really think it should be.

One more thing that came up is if import documents fire their own load event or
not.

Also the spec mentions a simple load event fired against the referring links,
but I'm not absolutely sure if that is a DOMContentLoaded or a Document load
kind of event, in terms of when to fire. Should we wait for images for example
in the import before we fire it?

(In reply to Brendan Eich from comment #3)
> It would help bug-followers to see the resolution in detail. IOW, for each
> hyphen-bulleted point in comment 0, a resolution item. Thanks,
> 
> /be

I think I closed this bug prematurely, also, this request is perfectly valid,
sorry about that. And thanks Anne for doing the work for me :)

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Saturday, 31 May 2014 14:54:47 UTC