I think Darin had some strong opinions about whether we should do
nested schemes like feed-view:http://foo.com/bar.

>From a security point of view, we'd ideally like to render feeds with
JavaScript and plug-ins disabled, as well as in a noAccess
SecurityOrigin.  This is easier if the feed preview lives in its own
scheme.  I'm happy to help out with the security bits once you have
the basics up and running.

Adam


On Wed, May 6, 2009 at 6:26 PM, Ben Goodger (Google) <[email protected]> wrote:
>
> On Wed, May 6, 2009 at 6:13 PM, Evan Martin <[email protected]> wrote:
>> - Some existing practice on the web is to use
>> "feed://hostname/etc.xml", which drops the protocol (and should be
>> interpreted as HTTP).  Ideally you should redirect these into
>> view-feed:http://hostname/etc.xml so our view-feed works with https,
>> ftp, etc. URLs.
>
> Firefox retains the URL of the feed in the address bar (including
> scheme), which is nice, though it falls back to an internal URL under
> the hood to do the render of the preview.
>
> -Ben
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
Chromium Developers mailing list: [email protected] 
View archives, change email options, or unsubscribe: 
    http://groups.google.com/group/chromium-dev
-~----------~----~----~----~------~----~------~--~---

Reply via email to