- From: Arve Bersvendsen <arveb@opera.com>
- Date: Fri, 23 May 2008 13:51:10 +0200
- To: "Dan Brickley" <danbri@danbri.org>, "Marcos Caceres" <marcosscaceres@gmail.com>
- Cc: www-tag@w3.org, "WAF WG (public)" <public-appformats@w3.org>, "Jon Ferraiolo" <jferrai@us.ibm.com>
On Fri, 23 May 2008 13:07:50 +0200, Dan Brickley <danbri@danbri.org> wrote: > Marcos Caceres wrote: >> Dear TAG, >> The WAF working group is seeking advice on the creation of a Widget >> URI scheme. > > If you really can't live with http: URIs, have you considered using the > tag: URI scheme, see http://www.faqs.org/rfcs/rfc4151.html Some considerations here: 1. Widgets, or other locally installed web applications may have multiple instances served from an arbitrary origin: Preinstalled on devices, beamed over bluetooth/IR, installed from a local file system, or over HTTP. Also 2. In general, the resources do need to resolve, as the DOM attributes are resolved, and normalized, so "DSC0201.jpg" - when loaded from the local filesystem - becomes for instance file://localhost/path/to/DSC0201.jpg". The tag: URI scheme specifically says this: Unlike most other URIs, tags can only be used as identifiers, and are not designed to support resolution. 3. It is desired to shield the widget from the file system of the runtime (e.g. a widget should not be able to discern information about the file system by examining files loaded from within the widget. 4. Widgets should not be able to have unchecked access to resources outside of itself. Use of the file: scheme makes this (more) difficult. -- Arve Bersvendsen Developer, Opera Software ASA, http://www.opera.com/
Received on Friday, 23 May 2008 11:53:16 UTC