Re: [whatwg] Readiness of script-created documents

2012-04-02 Thread Henri Sivonen
On Fri, Mar 30, 2012 at 8:26 PM, Jonas Sicking jo...@sicking.cc wrote: On Friday, March 30, 2012, Henri Sivonen wrote: On Fri, Jan 13, 2012 at 2:26 AM, Ian Hickson i...@hixie.ch wrote: Jonas is correct. Since there was no interop here I figured we might as well go with what made sense.

Re: [whatwg] Readiness of script-created documents

2012-04-02 Thread Henri Sivonen
On Mon, Apr 2, 2012 at 10:12 AM, Henri Sivonen hsivo...@iki.fi wrote: Gratuitously changing features introduced by IE does not help authors one day have to ...when they have to... -- Henri Sivonen hsivo...@iki.fi http://hsivonen.iki.fi/

Re: [whatwg] Readiness of script-created documents

2012-04-02 Thread Jonas Sicking
On Mon, Apr 2, 2012 at 12:12 AM, Henri Sivonen hsivo...@iki.fi wrote: On Fri, Mar 30, 2012 at 8:26 PM, Jonas Sicking jo...@sicking.cc wrote: On Friday, March 30, 2012, Henri Sivonen wrote: On Fri, Jan 13, 2012 at 2:26 AM, Ian Hickson i...@hixie.ch wrote: Jonas is correct. Since there was no

Re: [whatwg] Tables, headers and bodies

2012-04-02 Thread Tim Streater
On 01 Apr 2012 at 21:15, Jose Fandos iaminlon...@gmail.com wrote: Can anyone point to any discussions about table headers and table bodies and how to deal with having a fixed header and a scrollable body? I've done a number of searches but might not be using the right terms to unearth any

Re: [whatwg] Invalid values of dir attribute causing change in appearance?

2012-04-02 Thread Ian Hickson
On Tue, 24 Jan 2012, L. David Baron wrote: http://www.whatwg.org/specs/web-apps/current-work/multipage/rendering.html#bidirectional-text specifies that UA style sheets should have the rule: [dir] { unicode-bidi: embed; } This implies that invalid values of the dir attribute should cause a

[whatwg] register*Handler and Web Intents

2012-04-02 Thread Ian Hickson
On Tue, 6 Dec 2011, James Hawkins wrote: One of the critical pieces of the API is a declarative registration which allows sites to declare which intents they may be registered for. The current draft of the API calls for a new HTML tag, intent, the attributes of which describe the

Re: [whatwg] Fixing two security vulnerabilities in registerProtocolHandler

2012-04-02 Thread Ian Hickson
On Mon, 26 Sep 2011, Tyler Close wrote: I was recently experimenting with the registerProtocolHandler (RPH) API and came across a couple of security gotchas that make it hard to safely use the API. One of these is already known, but AFAICT, hasn't been fixed yet. I haven't seen the other

Re: [whatwg] Fixing two security vulnerabilities in registerProtocolHandler

2012-04-02 Thread Boris Zbarsky
On 4/2/12 7:39 PM, Ian Hickson wrote: For example, an attacker could open a window on a victim web page. The victim web page then opens aniframe on a content URL that triggers RPH. The attacker then navigates theiframe so that its window.location contains a different content URL. How can the

Re: [whatwg] [media] startOffsetTime, also add startTime?

2012-04-02 Thread Ian Hickson
On Fri, 9 Mar 2012, Philip Jägenstedt wrote: On Thu, 08 Mar 2012 19:16:40 +0100, Ian Hickson i...@hixie.ch wrote: On Thu, 8 Mar 2012, Philip Jägenstedt wrote: I suggest the property offsetTime, defined as the stream time in seconds which currentTime and duration are relative to.

Re: [whatwg] Fixing two security vulnerabilities in registerProtocolHandler

2012-04-02 Thread Ian Hickson
On Mon, 2 Apr 2012, Boris Zbarsky wrote: On 4/2/12 7:39 PM, Ian Hickson wrote: For example, an attacker could open a window on a victim web page. The victim web page then opens aniframe on a content URL that triggers RPH. The attacker then navigates theiframe so that its