TL;DR: Please go ahead.
š
24.11.2014, 23:20, "Mike West" <mkwst@google.com>:
On Mon, Nov 24, 2014 at 9:00 PM, Brad Hill <hillbrad@fb.com> wrote:
I've made a pull request to formalize the tone a bit.š Pending that or
similar updates by the editor, I support the publication of this draft.
š
Thank you! I accepted the pull, cleaned up a few bits, and republished:šhttp://w3c.github.io/webappsec/specs/powerfulfeatures/
š
It is really helpful in a call for consensus to have a URL to a snapshot. Consensus to publish "whatever was there when I looked" is actually seriously weakened if you can change what is there (this is security 101, right?).
š
That said, I think the changes I saw (up until about 15 minutes before I sent this mail) were helpful, and support publishing either way.
š
š
Regarding the issue #2 you added, 'blob:' has an origin, as does 'data:'. What clarification do you think is necessary in the algorithm in order to resolve the issue?
š
cheers
š
Chaals
š
--
Charles McCathie Nevile - web standards - CTO Office, Yandex
chaals@yandex-team.ru - - - Find more at http://yandex.com
š