W3C home > Mailing lists > Public > whatwg@whatwg.org > May 2006

[whatwg] Handling of script elements inside rendered OBJECT

From: Shadow2531 <shadow2531@gmail.com>
Date: Wed, 10 May 2006 23:00:14 -0400
Message-ID: <6b9c91b20605102000i4a7df084w3e310eda6b0135bf@mail.gmail.com>
<object type="text/html" data="about:blank">
   <script>alert('You should not see this!');</script>

What should happen in situations like that?

The script element is alternate content.
The object is rendered.
The script SHOULD NOT be executed *until* the alernate content is
rendered. (For example, if it's an image, you switch images off and
the alternate content is rendered.)

It makes sense to NOT execute the script in this situation.

However, browsers currently execute the script. (IE6 does not, but
that may be quirky object tag handling.)

Received on Wednesday, 10 May 2006 20:00:14 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:58:46 UTC