Re: DOM Level 2 HTML form.submit() safety / security

The definition of submit() in the DOM HTML 2.0 spec says only "Submits the
form. It performs the same action as a submit button."

Seems to me that this means the DOM implementation is free to implement
security checks on form submission, and have them applied here. The only
question seems to be whether there should be *additional* constraints. I
would submit that since the nature of those constraints is out of the DOM's
control, their existance is out of the scope of the DOM spec; take it up
with whoever's standardizing browser behaviors.

______________________________________
"... Three things are most perilous: Connectors that corrode,
  Unproven algorithms, and self-modifying code! ..."
  -- "Threes" Rev 1.1 - Duane Elms / Leslie Fish
(http://www.ovff.org/pegasus/songs/threes-rev-11.html)

Received on Thursday, 20 April 2006 20:36:10 UTC