Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-05 Thread Giorgio Maone
Peter Kasting wrote, On 05/04/2009 0.54: On Sat, Apr 4, 2009 at 12:56 PM, timeless timel...@gmail.com wrote: sounds like a security nightmare. Can you be less vague? We've had a number of security people vet this already, so specific complaints would be very helpful. PK It would

[whatwg] [html5] Pre-Last Call Comments

2009-04-05 Thread Giovanni Campagna
A few comments, as requested by Ian Hickson. - End of 2.2.1, a typo: JavsScript instead of Javascript - From section 2.4.2 I don't understand if boolean attributes with invalid values represent true or false. In addition, I don't understand if an empty value is false (as in XHTML1.0) or true (as

Re: [whatwg] [html5] Pre-Last Call Comments

2009-04-05 Thread Kristof Zelechovski
Character set x-x-big5 cannot be registered because it is private. Now that classid is gone, what will be the workaround for ActiveX objects where they are needed? 1. Ask Windows browsers to support Type=application/x-oleobject;classid=...? 2. Use a custom DTD with classid for

Re: [whatwg] [html5] Pre-Last Call Comments

2009-04-05 Thread João Eiras
On , Kristof Zelechovski giecr...@stegny.2a.pl wrote: Character set x-x-big5 cannot be registered because it is private. Now that classid is gone, what will be the workaround for ActiveX objects where they are needed? classid is nevertheless proprietary, and no other user agent but IE will

Re: [whatwg] [html5] Pre-Last Call Comments

2009-04-05 Thread Kristof Zelechovski
The specification forbids the authors using undefined elements and attributes; a document containing classid will not be valid. Still, the site hosting the controls will need a way to test validity of pages for QA. Chris

[whatwg] HTML5 typos

2009-04-05 Thread Kartikaya Gupta
I ran the spec through a typo-finder program I cooked up and it found these among lots of false positives. altogther (4.8.2.1.13) approprate (5.8.4) argments (4.8.11.1.10) asychronously (5.8.4) attribue's (2 in 4.6.12) attrbutes (4.10.4) constaints (4.10.14.2, 2 in 4.10.14.3) elemnt (4.10.14.3)

Re: [whatwg] [html5] Pre-Last Call Comments

2009-04-05 Thread Christoph Päper
Giovanni Campagna: - The second paragraph in 2.4.5.6 is hard to understand because the verb is at the end. I would rewrite as A week-year with a number *yr* has 53 weeks if corresponds to a year *yr* in the proleptic Gregorian calendar that has a Thursday as its first day (January 1st), or

Re: [whatwg] HTML5 typos

2009-04-05 Thread Aryeh Gregor
On Sun, Apr 5, 2009 at 3:44 PM, Kartikaya Gupta lists.wha...@stakface.com wrote: Also, the following words appear with different spelling variations; I suggest one of the variants be picked and used consistently: behaviour vs. behavior favorite vs. favourite honour vs. honor occurance[s]

[whatwg] Start position of media resources

2009-04-05 Thread Chris Double
Ogg based media resources can start from a time position that is not zero. Examples of files that do this are those generated by the program oggz-chop. For example: http://ia331342.us.archive.org/2/items/night_of_the_living_dead/night_of_the_living_dead.ogv?t=0:20:00/0:20:50 If this is played in

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-05 Thread Adam Barth
On Sun, Apr 5, 2009 at 1:09 AM, Giorgio Maone g.ma...@informaction.com wrote: It would make clickjacking attacks more precise, by exactly positioning the frame content where the attacker wants it to be. Not that you cannot already be pixel-precise by using absolute positioning inside an