Re: [whatwg] Spec for location object needs to make some properties unforgeable; need supporting WebIDL changes from Boris Zbarsky on 2012-10-23 (public-whatwg-archive@w3.org from October 2012)

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Tue, 23 Oct 2012 18:32:14 -0400
To: Ian Hickson <ian@hixie.ch>
Cc: Cameron McCormack <cam@mcc.id.au>, whatwg@lists.whatwg.org
Message-ID: <50871AEE.4040205@mit.edu>

On 10/23/12 5:45 PM, Ian Hickson wrote:
> heycam, bz, what's the conclusion on this?

I don't think we ever reached one...

> Should I
> define a valueOf and make just that, the toString serializer, and href
> unforgeable?

In the end, all properties and methods that let you read stuff out of 
Location need to be unforgeable as far as I can tell.

> Incidentally there's also a request to mark the 'location' attribute
> itself (on Document, presumably also the one on Window) unforgeable:

It's already unforgeable on Window, fwiw.

-Boris

Received on Tuesday, 23 October 2012 22:32:45 UTC