Re: Allow javascript: URIs for registerProtocolHandler

On Fri, Dec 13, 2013 at 2:54 PM, Anne van Kesteren <annevk@annevk.nl> wrote:
> A problem would be that
>
> <img src=data:...>
>
> is no longer safe as it could execute a network request if the MIME
> type was text/vcard or some such.

I also filed https://www.w3.org/Bugs/Public/show_bug.cgi?id=24091 to
further consider this.


-- 
http://annevankesteren.nl/

Received on Friday, 13 December 2013 14:56:56 UTC