Re: Mutation events replacement

2009-06-05 Thread Robin Berjon
On Jun 4, 2009, at 21:43 , Jonas Sicking wrote: That's annoying. I'm guessing that creating an Attr node just for this purpose is overhead we can live without given that they're never used, but it would be cheap (and dead useful) to include at least the attribute's name (ns/ln pair).

RE: [widgets] What does it mean to have an unavailable API

2009-06-05 Thread Marcin Hanclik
Hi Scott, If a Widget requires shared state and participant features (e.g. Google Wave), then we inject our reverse-AJAX JS, which triggers either polling, comet, or piggyback synching (depending on server configuration). So we wouldn't want to do this for every widget, especially when many of

New draft of Widgets: Access Requests Policy

2009-06-05 Thread Robin Berjon
Hi, a new ED of WARP is up, including the following changes based upon prior discussion: - a new, nicer name - better definitions - more fleshed ou requirements - more detailed policy - fixes to the element definition - fixes to the processing model - better acknowledgements Share

Fwd: [widgets] PC LC#2 comment regarding icons

2009-06-05 Thread Arthur Barstow
Marcos, All - I can't find a record of this email in the mail list archive. Begin forwarded message: From: Penukonda Venkat (EXT-PSD-MSW/Boston) ext- venkat.penuko...@nokia.com Date: June 2, 2009 11:59:34 AM EDT To: public-webapps@w3.org public-webapps@w3.org Cc: Barstow Art

Next DOM3 Events Telcon (Time and Day?)

2009-06-05 Thread Doug Schepers
Hi, Folks- I will be hosting a F2F at my house next week, but we will be reconvening the telcons week after next, probably on Wednesday, June 17 or Thursday, June 18. Either day works for me, but finding a good time for everyone might be challenging: we typically have attendees from Finland

Re: Origin enables XSS to escalate to XSRF (was: security issue with XMLHttpRequest API compatibility)

2009-06-05 Thread Mark S. Miller
[+www-tag] I have received several private responses to my post, but oddly, nothing public yet. In these responses, I have been asked most frequently about: On Wed, Jun 3, 2009 at 4:21 PM, Mark S. Miller erig...@google.com wrote: Why identify even same origin requests as cross-origin? Given