W3C home > Mailing lists > Public > whatwg@whatwg.org > July 2010

[whatwg] Constraint validation for maxlength

From: Jonas Sicking <jonas@sicking.cc>
Date: Thu, 22 Jul 2010 14:46:49 -0700
Message-ID: <AANLkTimPaKwvDlwd2JciSu4Z91GdvurlcT0okFJvf9mL@mail.gmail.com>
On Thu, Jul 22, 2010 at 2:18 PM, Aryeh Gregor <Simetrical+w3c at gmail.com> wrote:
> maxlength predates all the other form validation attributes by many
> years. ?Historically, browsers would prohibit users from entering text
> beyond the maxlength of an input or textarea, but would not prohibit
> form submission. ?HTML5 changes this:
>
> """
> Constraint validation: If an element has a maximum allowed value
> length, and its dirty value flag is true, and the code-point length of
> the element's value is greater than the element's maximum allowed
> value length, then the element is suffering from being too long.
> """
> http://www.whatwg.org/specs/web-apps/current-work/multipage/association-of-controls-and-forms.html#limiting-user-input-length
>
> If I read it correctly, this means that pages that previously worked
> no longer will, if a script sets the value of the input to something
> longer than the maxlength. ?Something like this was reported against
> Chromium (although in this case it was more of a browser bug for
> autofilling passwords beyond maxlength):
>
> http://code.google.com/p/chromium/issues/detail?id=45640#c2
>
> These two test cases show that Opera maintains the legacy behavior
> (not compatible with the spec) and submits the forms regardless of
> maxlength violations, while WebKit (Chromium) blocks submission as
> required by the spec:
>
> data:text/html,<!doctype html><body
> onload="document.getElementById('a').value='foo'"><form><input id=a
> maxlength=2><input type=submit></form>Try to submit the form
>
> data:text/html,<!doctype html><form><input id=a><input
> type=submit></form><a href=""
> onclick="document.getElementById('a').maxLength = 2; return
> false">Enter "foo" into the input, click here, then try to submit</a>
>
> Should the spec (and WebKit) be changed here, or should Opera change?

I think that depends largely on how many, and how big, sites are
affected by this. Do you have a list of known sites with this issue?

/ Jonas
Received on Thursday, 22 July 2010 14:46:49 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:59:25 UTC