Re: Allow javascript: URIs for registerProtocolHandler

On Wed, Nov 27, 2013 at 11:43 PM, Ian Hickson <ian@hixie.ch> wrote:
> On Wed, 18 Sep 2013, Anne van Kesteren wrote:
>> Maybe. We'd lose the symmetry with registerContentHandler() unless we
>> move its redirect-like logic to fetch as well, aside from the security
>> implications. And "cool feature" is not a solid enough use case I think
>> for the complexity it brings.
>
> The complexity is pretty low, no?
>
> (I agree that both kinds of registrations should work the same.)

A problem would be that

<img src=data:...>

is no longer safe as it could execute a network request if the MIME
type was text/vcard or some such.


-- 
http://annevankesteren.nl/

Received on Friday, 13 December 2013 14:54:30 UTC