Re: [whatwg] Fetch: crossorigin=anonymous and XMLHttpRequest

2013-03-21 Thread Jonas Sicking
On Wed, Mar 20, 2013 at 2:31 PM, Anne van Kesteren ann...@annevk.nl wrote:
  That said, allowing both anonymous and non-anonymous requests to do
  xhr.setRequestHeader(referer, ) might be a good idea. I.e. being
  able to set it explicitly to the empty string.

 Okay.

 Does anonymous also mean not handling 401 by prompting the user?

I think so yes.

 What about 407?

The fact that there's a proxy that the user needs to log in to should
never be exposed to the platform I would think. Nor should the
platform be able to affect how the user interacts with such a proxy.

/ Jonas


Re: [whatwg] Question about document.referrer (and document.URL, document.location.href) when IDN domains are in use

2013-03-21 Thread Anne van Kesteren
On Wed, Mar 20, 2013 at 10:46 PM, Boris Zbarsky bzbar...@mit.edu wrote:
 The question is whether it's more important for document.referrer to match
 the HTTP header (so the note will actually be true) or location.href and
 .URL...  Well, and the other question is what .URL and location.href should
 return, since clearly we don't exactly have interop there.

My ongoing assumption has been that we want to serialize to punycode
always in the API as the Unicode form is very much a UI decision and
we do not want to leak that detail to web developers. (We do at some
point want to expose an API to convert one to the other, irrespective
of UI considerations.)


-- 
http://annevankesteren.nl/


Re: [whatwg] URL standard: Query string parsing; host parsing

2013-03-21 Thread Anne van Kesteren
On Wed, Mar 20, 2013 at 7:52 PM,  pocci...@gmail.com wrote:
  Accordingly, should this rule and/or the percent decoding algorithm be 
 redefined to allow Unicode characters here?

The host parser is only given Unicode input where the string has code
points in the range U+ to U+007F.


  (A related question is whether the URL standard should just go ahead and 
 adopt Unicode Technical Standard 46 for IDNA, but that issue need not be 
 answered now.)

http://annevankesteren.nl/2012/11/idna-hell


-- 
http://annevankesteren.nl/


Re: [whatwg] Hide placeholder on input controls on focus

2013-03-21 Thread James Ross
 From: k...@iqmultimedia.com.au
 To: resca...@emsai.net; derer...@gmx.ch
 Date: Thu, 21 Mar 2013 01:18:26 +
 CC: whatwg@lists.whatwg.org
 Subject: Re: [whatwg] Hide placeholder on input controls on focus

 I'm skeptical that this is genuinely a significant issue with users, chiefly 
 because I've never really seen any page authors feel the need to implement 
 anything like this, and because as stated earlier Safari, Firefox and Chrome 
 all use non-hiding placeholders in various places in their browser chrome 
 without any sort of special treatment on focus.

 Surprisingly, the only example I could find of a developer doing something 
 both on focus *and* once the user starts typing is Opera in its address bar 
 and search field, which behaves as you describe; the placeholder text goes 
 lighter on focus.

 Nevertheless, the _only_ browser I can find which actively removes its 
 placeholder text on focus is IE 8 (in its search field). I can't believe that 
 there needs to be a different implementation for fields in the browser's own 
 chrome as for in-page form fields.

Just as an added data-point (that I only noticed today) - Windows 7's 
placeholder implementation in the Start menu and Explorer's search box:
 - The text is displayed in grey *and* italic *and* with a space at the start.
 - Focusing the input box with tab/Control-E or autofocus when opening the 
Start menu does *not* hide the placeholder.
 - Typing hides the placeholder and clearing to empty re-shows it.
 - Control-A or clicking in the textbox hides the placeholder.

This to me seems like a very interesting compromise between the two observed 
behaviours in browsers - autofocus does not prevent the user seeing the 
placeholder but any attempt to interact with it (by typing, mouse clicking or 
control-a) removes it.

I would be interested in why this behaviour was not adopted in IE10's 
input[placeholder] implementation.

-- 
James Ross sil...@warwickcompsoc.co.uk

Re: [whatwg] Question about document.referrer (and document.URL, document.location.href) when IDN domains are in use

2013-03-21 Thread James Ross
 Date: Wed, 20 Mar 2013 22:46:15 -0400
 From: bzbar...@mit.edu
 To: wha...@whatwg.org
 Subject: [whatwg] Question about document.referrer (and document.URL, 
 document.location.href) when IDN domains are in use

 1) Gecko shows exactly the string we put on the wire in
 document.referrer (punycode and all). document.URL and
 document.location.href show the non-ASCII chars in some cases.

 2) WebKit (or at least Chrome) seems to return punycode for all three
 of these.

 3) Opera seems to return non-ASCII chars for all three of these, at
 least in some cases.

IE 10 shows the non-ASCII chars in all three in the cases I've tried just now.

-- 
James Ross sil...@warwickcompsoc.co.uk

Re: [whatwg] Hide placeholder on input controls on focus

2013-03-21 Thread Markus Ernst

Am 21.03.2013 12:10 schrieb James Ross:

Just as an added data-point (that I only noticed today) - Windows 7's 
placeholder implementation in the Start menu and Explorer's search box:
  - Focusing the input box with tab/Control-E or autofocus when opening the 
Start menu does *not* hide the placeholder.
  - Control-A or clicking in the textbox hides the placeholder.


I was not aware of the possibility to distinguish between clicking in a 
textbox and other ways to focus it. This behaviour seems to be very 
user-friendly to me.


Re: [whatwg] URL standard: Query string parsing; host parsing

2013-03-21 Thread Peter Occil
I see, the IDNA issue is still unsettled. So do you have advice for how
implementers should parse and validate domain names in the meantime? Should
the implementation convert domain names to punycode, validate their length,
or any of these?
On Mar 21, 2013 7:08 AM, Anne van Kesteren ann...@annevk.nl wrote:

 On Wed, Mar 20, 2013 at 7:52 PM,  pocci...@gmail.com wrote:
   Accordingly, should this rule and/or the percent decoding algorithm be
 redefined to allow Unicode characters here?

 The host parser is only given Unicode input where the string has code
 points in the range U+ to U+007F.


   (A related question is whether the URL standard should just go ahead
 and adopt Unicode Technical Standard 46 for IDNA, but that issue need not
 be answered now.)

 http://annevankesteren.nl/2012/11/idna-hell


 --
 http://annevankesteren.nl/



Re: [whatwg] URL standard: Query string parsing; host parsing

2013-03-21 Thread Anne van Kesteren
On Thu, Mar 21, 2013 at 10:00 AM, Peter Occil pocci...@gmail.com wrote:
 I see, the IDNA issue is still unsettled. So do you have advice for how
 implementers should parse and validate domain names in the meantime? Should
 the implementation convert domain names to punycode, validate their length,
 or any of these?

As far as I can tell the most prominent implementations still
implement IDNA2003. In fact, with Rebel Opera gone, all browsers do
IDNA2003. So maybe we should standardize on that. The problem with
standardizing on that of course is that it runs counter to registrar
policies :-(


-- 
http://annevankesteren.nl/


Re: [whatwg] Hide placeholder on input controls on focus

2013-03-21 Thread Benjamin Stürmer
 Just as an added data-point (that I only noticed today) - Windows 7's
 placeholder implementation in the Start menu and Explorer's search box:
   - Focusing the input box with tab/Control-E or autofocus when opening
 the Start menu does *not* hide the placeholder.
   - Control-A or clicking in the textbox hides the placeholder.

 I was not aware of the possibility to distinguish between clicking in a
 textbox and other ways to focus it. This behaviour seems to be very
 user-friendly to me.

I think this is a neat feature in the Windows Start Menu, but I think
it's a bad idea to distinguish between the two sources of focus in the
case of a placeholder text. If I have an on-load handler that focuses
a different element depending on some logic (for example, autoselect
the first empty field in a form), that behavior would then result in a
different appearance than if I set the autofocus attribute, even
though the page's behavior would be identical from the user's
perspective.

Other than that, though, the formatting used in the Windows Start Bar
and several other places already mentioned by others -- light grey and
italicized -- seems like the best option to me. I'd also be in favor
of giving placeholder text opacity on focus, though italicizing the
text seems like a sufficiently strong signal that that might not be
necessary.

I have anecdotal evidence of user confusion both from placeholders
vanishing on focus and from placeholder text looking the same as input
text. The first was when some of my users got confused by an app I
built before I realized that IE was hiding placeholders on focus. The
second was me, testing the same app -- I know how placeholders work,
but I kept instinctively trying to highlight the text because it
exactly matched the formatting of actual values.

~ Benjamin


Re: [whatwg] Question about document.referrer (and document.URL, document.location.href) when IDN domains are in use

2013-03-21 Thread Ian Hickson
On Wed, 20 Mar 2013, Boris Zbarsky wrote:

 The spec for document.referrer says:
 
   The referrer attribute must return the document's referrer.
 
 The document's referrer is not really defined anywhere in a useful way 
 that I can find.

Yikes, I apparently forgot to fill that in. Sorry about that. Try now.

I'll leave your e-mail in my pile to make sure I deal with the remaining 
issues you mentioned, though.

-- 
Ian Hickson   U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/   U+263A/,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'


Re: [whatwg] Question about document.referrer (and document.URL, document.location.href) when IDN domains are in use

2013-03-21 Thread Boris Zbarsky

On 3/21/13 2:22 PM, Ian Hickson wrote:

On Wed, 20 Mar 2013, Boris Zbarsky wrote:

The document's referrer is not really defined anywhere in a useful way
that I can find.


Yikes, I apparently forgot to fill that in. Sorry about that. Try now.


Much better, thanks.  I haven't dug through the resulting thing to 
figure out what it does with IDN, so far...


-Boris


Re: [whatwg] Question about document.referrer (and document.URL, document.location.href) when IDN domains are in use

2013-03-21 Thread Boris Zbarsky

On 3/21/13 7:01 AM, Anne van Kesteren wrote:

On Wed, Mar 20, 2013 at 10:46 PM, Boris Zbarsky bzbar...@mit.edu wrote:



My ongoing assumption has been that we want to serialize to punycode
always in the API


Hmm.  That _does_ suck if you want to show location stuff to the user, 
though (though a proposed ACE-to-Unicode API would somewhat help, if 
you remember to use it).



as the Unicode form is very much a UI decision and
we do not want to leak that detail to web developers.


You mean the decision as to when exactly to use the Unicode and when to 
use ACE?  In what way is it a UI decision (apart from browser URL bars 
having anti-phishing logic that falls back to ACE when they detect 
weird chars in the URI)?



(We do at some
point want to expose an API to convert one to the other, irrespective
of UI considerations.)


Agreed, but that doesn't help answer the question of what authors should 
get in the DOM.


Or put another way, it seems like we should be trying to use IRIs until 
we can't for some reason, and I see no a priori reason that 
location.href can't be an IRI...


-Boris


Re: [whatwg] Question about document.referrer (and document.URL, document.location.href) when IDN domains are in use

2013-03-21 Thread Anne van Kesteren
On Thu, Mar 21, 2013 at 2:33 PM, Boris Zbarsky bzbar...@mit.edu wrote:
 On 3/21/13 7:01 AM, Anne van Kesteren wrote:
 as the Unicode form is very much a UI decision and
 we do not want to leak that detail to web developers.

 You mean the decision as to when exactly to use the Unicode and when to use
 ACE?  In what way is it a UI decision (apart from browser URL bars having
 anti-phishing logic that falls back to ACE when they detect weird chars in
 the URI)?

E.g. Chrome only shows Unicode if they have indication (prolly locale)
that the end-user will understand it and will use ACE otherwise. I do
not want that kind of logic to leak through developer-exposed APIs.
That's madness.

See http://wiki.whatwg.org/wiki/URL#UI for links to more details.


 Or put another way, it seems like we should be trying to use IRIs until we
 can't for some reason, and I see no a priori reason that location.href can't
 be an IRI...

If we can define until we can't I would be okay with that. Otherwise
it seems safer to always use punycode and delegate the problem.


-- 
http://annevankesteren.nl/


Re: [whatwg] Question about document.referrer (and document.URL, document.location.href) when IDN domains are in use

2013-03-21 Thread Boris Zbarsky

On 3/21/13 2:40 PM, Anne van Kesteren wrote:

You mean the decision as to when exactly to use the Unicode and when to use
ACE?  In what way is it a UI decision (apart from browser URL bars having
anti-phishing logic that falls back to ACE when they detect weird chars in
the URI)?


E.g. Chrome only shows Unicode if they have indication (prolly locale)
that the end-user will understand it and will use ACE otherwise.


You mean shows Unicode in their url bar?  Firefox does something similar.

I agree that's a UI decision that should have nothing to do with what 
location.href shows.



I do not want that kind of logic to leak through developer-exposed APIs.
That's madness.


Agreed.


If we can define until we can't I would be okay with that.


OK, makes sense.

-Boris


Re: [whatwg] Hide placeholder on input controls on focus

2013-03-21 Thread Roger Hågensen

On 2013-03-21 14:02, Markus Ernst wrote:

Am 21.03.2013 12:10 schrieb James Ross:
Just as an added data-point (that I only noticed today) - Windows 7's 
placeholder implementation in the Start menu and Explorer's search box:
  - Focusing the input box with tab/Control-E or autofocus when 
opening the Start menu does *not* hide the placeholder.

  - Control-A or clicking in the textbox hides the placeholder.


I was not aware of the possibility to distinguish between clicking in 
a textbox and other ways to focus it. This behaviour seems to be very 
user-friendly to me.




As far as I know there are hover, focus, and modified (are there 
others?). The events varies whether it's in a browser (and which 
browser) and which OS (and which GUI API).


Ideally a browser chrome should follow the OS styleguide to provide a 
consistent OS user experience.
And with HTML5 stuff should behave consistently in all HTML5 supporting 
browsers.
But that's just my opinion on where the line should be drawn. There 
are after all things like the context menu stuff that crosses the GUI 
boundaries.


--
Roger Rescator Hågensen.
Freelancer - http://www.EmSai.net/



Re: [whatwg] Hide placeholder on input controls on focus

2013-03-21 Thread Kit Grose
On 22/03/2013, at 6:20 AM, Roger Hågensen wrote:

 Ideally a browser chrome should follow the OS styleguide to provide a 
 consistent OS user experience.
 And with HTML5 stuff should behave consistently in all HTML5 supporting 
 browsers.

I disagree that all HTML5 supporting browsers should (necessarily) behave 
consistently, especially coupled with the implication that it should do so even 
in violation of the OS's conventions.

UAs should implement all interactive controls in the way that is most 
consistent with user expectations. Surely it's better for users that their 
browser behaves consistently with the other apps on their own system than it is 
for browsers to behave consistently across a variety of platforms.

I don't believe the specification should dictate any visual style for 
placeholders, nor any specific behaviour for hiding the placeholder. In that 
way, I support the current phrasing of the specification which cedes that 
decision to implementors. This provides each implementor the latitude to 
implement the placeholder behaviour in a way that is consistent with the 
platform it's running on, as they (presumably) currently do for their browser 
chrome.


Kit Grose
User Experience + Tech Director,
iQmultimedia