Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-07-30 Thread Ian Hickson
On Sat, 18 Jul 2009, Adam Barth wrote: On Fri, Jul 17, 2009 at 4:10 PM, Ian Hicksoni...@hixie.ch wrote: Suppose that there is a tool where someone can write some text, in which case the text will be displayed when the page is loaded. Suppose that whether the person has written this text is

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-07-18 Thread Adam Barth
On Fri, Jul 17, 2009 at 4:10 PM, Ian Hicksoni...@hixie.ch wrote: Suppose that there is a tool where someone can write some text, in which case the text will be displayed when the page is loaded. Suppose that whether the person has written this text is confidential, and that whether one had

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-07-17 Thread Ian Hickson
On Mon, 29 Jun 2009, Ojan Vafai wrote: On Tue, Jun 2, 2009 at 11:38 PM, Ian Hickson i...@hixie.ch wrote: On Fri, 3 Apr 2009, Ojan Vafai wrote: I'm suggesting an addition to cross-domain (i)frames that allows scrolling specific content into view. The use case is sites that

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-06-29 Thread Ojan Vafai
On Tue, Jun 2, 2009 at 11:38 PM, Ian Hickson i...@hixie.ch wrote: On Fri, 3 Apr 2009, Ojan Vafai wrote: I'm suggesting an addition to cross-domain (i)frames that allows scrolling specific content into view. The use case is sites that aggregate data from many sites (e.g. search engines)

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-06-03 Thread Ian Hickson
On Fri, 3 Apr 2009, Ojan Vafai wrote: I'm suggesting an addition to cross-domain (i)frames that allows scrolling specific content into view. The use case is sites that aggregate data from many sites (e.g. search engines) and want to display that data in an iframe. They can load the page in

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-14 Thread Henri Sivonen
On Apr 9, 2009, at 16:21, Jon Barnett wrote: Do other browsers have easy scripting support for XPath? In addition to Gecko, WebKit and Presto support the document.evaluate() API for using XPath from JS. -- Henri Sivonen hsivo...@iki.fi http://hsivonen.iki.fi/

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-14 Thread Alex Russell
On Thu, Apr 9, 2009 at 6:21 AM, Jon Barnett jonbarn...@gmail.com wrote: On Mon, Apr 6, 2009 at 3:51 PM, Jonas Sicking jo...@sicking.cc wrote: From my point of view I'm not sure how interesting this whole feature is. We had support in firefox for XPointer for many years and saw little to no

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-14 Thread Alex Russell
On Tue, Apr 14, 2009 at 9:48 AM, Alex Russell slightly...@google.com wrote: On Thu, Apr 9, 2009 at 6:21 AM, Jon Barnett jonbarn...@gmail.com wrote: On Mon, Apr 6, 2009 at 3:51 PM, Jonas Sicking jo...@sicking.cc wrote: From my point of view I'm not sure how interesting this whole feature is.

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-09 Thread Jon Barnett
On Mon, Apr 6, 2009 at 3:51 PM, Jonas Sicking jo...@sicking.cc wrote: From my point of view I'm not sure how interesting this whole feature is. We had support in firefox for XPointer for many years and saw little to no uptake. I'm not sure if anyone complained when we removed the support even

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-09 Thread Boris Zbarsky
Jon Barnett wrote: Was it advertized? Not particularly. I follow Firefox closely enough, but I don't remember when XPointer was supported. If you only follow Firefox, then you might not have have noticed it anyway. XPointer support for anchor scrolling was added to Gecko in March 2003.

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-06 Thread Ojan Vafai
On Fri, Apr 3, 2009 at 10:46 PM, Cameron McCormack c...@mcc.id.au wrote: Ojan Vafai: 2) Add a css or xpath expression to fragment identifiers. Tthe iframe src can be set to http://foo.com#css(.foo #bar). Same as above applies. If there's no match, it's a noop. If there is a match, it

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-06 Thread Giovanni Campagna
2009/4/6 Ojan Vafai o...@chromium.org: On Fri, Apr 3, 2009 at 10:46 PM, Cameron McCormack c...@mcc.id.au wrote: Ojan Vafai: 2) Add a css or xpath expression to fragment identifiers. Tthe iframe src can be set to http://foo.com#css(.foo #bar). Same as above applies. If there's no match,

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-06 Thread Jonas Sicking
On Mon, Apr 6, 2009 at 11:33 AM, Giovanni Campagna scampa.giova...@gmail.com wrote: 2009/4/6 Ojan Vafai o...@chromium.org: On Fri, Apr 3, 2009 at 10:46 PM, Cameron McCormack c...@mcc.id.au wrote: Ojan Vafai: 2) Add a css or xpath expression to fragment identifiers. Tthe iframe src can be

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-05 Thread Giorgio Maone
Peter Kasting wrote, On 05/04/2009 0.54: On Sat, Apr 4, 2009 at 12:56 PM, timeless timel...@gmail.com wrote: sounds like a security nightmare. Can you be less vague? We've had a number of security people vet this already, so specific complaints would be very helpful. PK It would

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-05 Thread Adam Barth
On Sun, Apr 5, 2009 at 1:09 AM, Giorgio Maone g.ma...@informaction.com wrote: It would make clickjacking attacks more precise, by exactly positioning the frame content where the attacker wants it to be. Not that you cannot already be pixel-precise by using absolute positioning inside an

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-04 Thread timeless
sounds like a security nightmare. we already have people complaining about reframing and spoofing and things.

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-04 Thread Peter Kasting
On Sat, Apr 4, 2009 at 12:56 PM, timeless timel...@gmail.com wrote: sounds like a security nightmare. Can you be less vague? We've had a number of security people vet this already, so specific complaints would be very helpful. PK

[whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-03 Thread Ojan Vafai
I'm suggesting an addition to cross-domain (i)frames that allows scrolling specific content into view. The use case is sites that aggregate data from many sites (e.g. search engines) and want to display that data in an iframe. They can load the page in an iframe, but they have no way to make the

Re: [whatwg] cross-domain scrollIntoView on frames and iframes

2009-04-03 Thread Cameron McCormack
Ojan Vafai: 2) Add a css or xpath expression to fragment identifiers. Tthe iframe src can be set to http://foo.com#css(.foo #bar). Same as above applies. If there's no match, it's a noop. If there is a match, it scrolls the first one into view. Sounds like XPointer: