[whatwg] Javascript: URLs as element attributes

On Mon, 14 Feb 2011, Philip J?genstedt wrote:
> 
> For the record, I removed Opera's "support" (I assume it was an 
> unintended side-effect) for <object data="javascript:..."> along with 
> the rest at the time when I wrote my previous mail in this thread. This 
> intentionally doesn't match what the spec says. (Disclaimer: this is 
> only my opinion on something that isn't really my area of expertise, so 
> others at Opera might decide that the spec is great and push in the 
> opposite direction. It seems unlikely at this point, though.)
>
> [...]
> 
> Of what has been brought up so far, javascript: as an inline resource is 
> not very useful at all, so IMO the only reason to keep it would be for 
> legacy compat. I'll follow up on this again once the change to block 
> inline javascript: URLs in Opera has been in the wild for a while, 
> hopefully reporting that no compat issues have arisen.

Since only Firefox now supports this, I've removed support for it from the 
spec. (It's just commented out for now; we can put it back if someone 
makes a compelling argument.)

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'

Received on Friday, 13 May 2011 15:34:36 UTC