Re: [whatwg] Video with MIME type application/octet-stream

2010-09-09 Thread Philip Jägenstedt
I think we should always sniff or never sniff, for simplicity. Philip On Wed, 08 Sep 2010 19:14:48 +0200, David Singer sin...@apple.com wrote: what about don't sniff if the HTML gave you a mime type (i.e. a source element with a type attribute), or at least don't sniff for the purposes of

Re: [whatwg] The choice of script global object to use when the script element is moved

2010-09-09 Thread Henri Sivonen
On Sep 9, 2010, at 00:47, Ian Hickson wrote: On Fri, 3 Sep 2010, Henri Sivonen wrote: When evaluating a parser-inserted script, there are three potential script global objects to use: 1) The script global object of the document whose active parser the parser that inserted the script is.

[whatwg] Partial HTML5 documents

2010-09-09 Thread Rostislav Hristov
Hello, I'm looking for a way to define valid partial HTML fragments that can be included into other documents using a server-side language or injected using AJAX. The current specification doesn't have any major restrictions in this area but it always require the presence of a TITLE tag which in

Re: [whatwg] Partial HTML5 documents

2010-09-09 Thread Thomas Broyer
On Thu, Sep 9, 2010 at 6:06 PM, Rostislav Hristov rostislav.hris...@gmail.com wrote: Hello, I'm looking for a way to define valid partial HTML fragments that can be included into other documents using a server-side language or injected using AJAX. The current specification doesn't have any

Re: [whatwg] Partial HTML5 documents

2010-09-09 Thread Tab Atkins Jr.
On Thu, Sep 9, 2010 at 9:06 AM, Rostislav Hristov rostislav.hris...@gmail.com wrote: Hello, I'm looking for a way to define valid partial HTML fragments that can be included into other documents using a server-side language or injected using AJAX. The current specification doesn't have any

Re: [whatwg] Partial HTML5 documents

2010-09-09 Thread Rostislav Hristov
I'm actually looking into manually editing these in an authoring environment and this is why I want them to be valid. The parsing section looks fine but it doesn't help in this case. Best, Rostislav Asual - Open software that

Re: [whatwg] Partial HTML5 documents

2010-09-09 Thread Thomas Broyer
On Thu, Sep 9, 2010 at 6:37 PM, Rostislav Hristov wrote: I'm actually looking into manually editing these in an authoring environment and this is why I want them to be valid. The parsing section looks fine but it doesn't help in this case. Yes, sorry, I was thinking in terms of parse errors.

[whatwg] Which vulnerabilities in HTML4 are (partially) solved in HTML5

2010-09-09 Thread zhao Matt
I saw the iframe element adds the attribute 'sandbox' in HTML5, which can better protect users from malicious content. so I want to know whether or not there are other changes, HTML5 can (partially) solve some vulnerabilities in HTML4 ? thanks.

Re: [whatwg] Video with MIME type application/octet-stream

2010-09-09 Thread David Singer
I can't think why always sniffing is simple, or cheap, or desirable. I'd love to get to never-sniff, but am not sanguine. On Sep 9, 2010, at 0:07 , Philip Jägenstedt wrote: I think we should always sniff or never sniff, for simplicity. Philip On Wed, 08 Sep 2010 19:14:48 +0200, David

Re: [whatwg] Video with MIME type application/octet-stream

2010-09-09 Thread Andy Berkheimer
Much of this discussion has focused on the careless server operator. What about the careful ones? Given the past history of content sniffing and security warts, it is useful - or at least comforting - to have a path for the careful server to indicate I know this file really is intended to be

Re: [whatwg] Video with MIME type application/octet-stream

2010-09-09 Thread David Singer
On Sep 9, 2010, at 16:38 , Andy Berkheimer wrote: Much of this discussion has focused on the careless server operator. What about the careful ones? Given the past history of content sniffing and security warts, it is useful - or at least comforting - to have a path for the careful