On Wed, Mar 27, 2013 at 12:30 AM, Jonas Sicking <jo...@sicking.cc> wrote: > I think the original concern was that implementations might not be > able to reliably generate unguessable URLs. Potentially that's > something that we could require though.
Yeah, think so. > However we'd still need to nail down what the new behavior should be. > Should it behave like data: URLs? The main advantage of those is that > implementations still don't agree on how those should behave. I'm not sure what that means. I can easily postMessage() a data URL to an <iframe> of another origin and that <iframe> can then load the data URL in an <img> and have it work (obviously, as the data URL is self-contained). -- http://annevankesteren.nl/