Comment #9 on issue 1129 by felix8a: js that performs user actions like
submit() or click()
http://code.google.com/p/google-caja/issues/detail?id=1129
I don't think we care about avoiding the host page's event listeners,
because that's something the host page does voluntarily.
the main reason we haven't supported click is that it allows script to do
things like navigate without user interaction, but we have code now that
will allow calls like focus and click when processing a user action
(similar to popup blocker strategy)
for something like jquery tests, I think we could add a domado startup flag
that means "allow unsafe click() calls", since we know what code is being
run, and allowing the click helps improve test coverage.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
---
You received this message because you are subscribed to the Google Groups "Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
