Joe Gregorio wrote:
On 1/27/06, James M Snell <[EMAIL PROTECTED]> wrote:
Joe Gregorio wrote:
How is a client supposed to detect that a server
rejects any entry with a title/@type="xhtml"?
I know that's probably going to be rare, but iti is currently
allowed since there is currently no spec text which states:
May not be as rare as you think. The APP implementation I'm currently
working on is being grafted over an existing data model in which titles
are, you guessed it, text only. Markup in titles is not allowed. If
you pass in markup, it would come out as escaped text. Rather than lose
data by dropping the tags and changing the type to text, we're rejecting
the posts with a 403 Forbidden (possibly changing to a 422).
Hmm, besides being a clear violation of Postel's law,
You reference Postel's "Robustness Priciple" as if it were a law or
something. It certainly is a good idea for "safe" operations, like HTTP
GET. I'm entirely unconvinced of the wisdom of it being applied too
broadly for POST, PUT, or DELETE operations. The ramifications of
silent data loss may be entirely too great.
how is my client supposed to detect/recover from this?
Note to self: change subject lines whenever introducting a new topic.
Here's the relevant portion of the email to which you were originally
responding:
2) Extension elements in introspection documents may be used to
express policies or constraints. Clients are expected to ingore any
such elements that they don't understand, but must be prepared to
accept the consequences of downstream failures in such circumstances.
These extensions will also likely fall out of the interop activities.
"Why was my request rejected?". "Because you didn't supply a valid
category name". "How should I know that?" "Oh, perhaps I should
have told you - here, now I put something in the introspection
document that you can use to dynamically adjust your GUI".
If Snell's markup-less title implementation is robust, it would put such
an element into the introspection document, and would accept text, html,
and xhtml titles, but only if they don't actually contain markup.
- Sam Ruby
