W3C home > Mailing lists > Public > whatwg@whatwg.org > March 2007

[whatwg] Apply script.defer to internal scripts

From: Gervase Markham <gerv@mozilla.org>
Date: Thu, 29 Mar 2007 09:57:47 +0100
Message-ID: <460B7F8B.7050400@mozilla.org>
Alexey Feldgendler wrote:
> What's wrong with simply placing it after </body>?

It may be in the future that the location of the script within the page 
affects its security status.
http://www.gerv.net/security/content-restrictions/
(Or, to put it another way, authors may wish to put all their script 
e.g. within the <head> to allow them to use XSS mitigation measures.)

Therefore, we should try, as far as possible, not to impose restrictions 
which dictate where in the page a particular script needs to be.

Gerv
Received on Thursday, 29 March 2007 01:57:47 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:58:54 UTC