Re: Adopting postMessage and MessageChannel from HTML5?

2010-01-14 Thread Arthur Barstow
Hi All, On Jan 12, 2010, at 10:42 AM, ext Maciej Stachowiak wrote: On Jan 12, 2010, at 3:48 AM, Arthur Barstow wrote: Was that Advisory Committee Review process followed for any of the other specs we're working on that are not mentioned by name in the charter? I listed a number of them in my

[widgets][vmmf] clarifications

2010-01-14 Thread Marcin Hanclik
Hi All, I have modified the VMMF draft at http://dev.w3.org/2006/waf/widgets-vmmf/ and merged the comments from Vodafone after reviewing them. I have the following questions that I would like to agree on (the VMMF text highlights the corresponding content): 1. Does the interactivity affect the

Re: [UMP] Server opt-in

2010-01-14 Thread Tyler Close
On Tue, Jan 12, 2010 at 5:34 PM, Adam Barth w...@adambarth.com wrote: On Tue, Jan 12, 2010 at 4:24 PM, Mark S. Miller erig...@google.com wrote: The most it can do is ignore such information. It is up to the client not to provide such information. It is the job of the standard to require the

[WARP] Extending access to local network resources

2010-01-14 Thread Stephen Jolly
All, Back in December I volunteered (http://www.w3.org/2009/12/10-wam-minutes.html) to propose an alteration / supplement to WARP to permit widget access to resources on local networks with no managed DNS system. Such resources do not fit into the current WARP model of listing origins in the

[Bug 8758] New: Define DOMContentLoaded

2010-01-14 Thread bugzilla
http://www.w3.org/Bugs/Public/show_bug.cgi?id=8758 Summary: Define DOMContentLoaded Product: WebAppsWG Version: unspecified Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: P2

Re: [UMP] Server opt-in

2010-01-14 Thread Adam Barth
On Thu, Jan 14, 2010 at 9:20 AM, Tyler Close tyler.cl...@gmail.com wrote: The confidentiality of a resource can be compromised by a CSRF vulnerability in a legitimate client. Can you define what you mean by CSRF? I think we must have different ideas about what the term means because I don't

Re: File API: Blob and underlying file changes.

2010-01-14 Thread Jian Li
It seems that we feel that when a File object is sent via either Form or XHR, the latest underlying version should be used. When we get a slice via Blob.slice, we assume that the underlying file data is stable since then. So for uploader scenario, we need to cut a big file into multiple pieces.

Re: [UMP] Server opt-in

2010-01-14 Thread Tyler Close
On Thu, Jan 14, 2010 at 11:34 AM, Adam Barth w...@adambarth.com wrote: On Thu, Jan 14, 2010 at 9:20 AM, Tyler Close tyler.cl...@gmail.com wrote: The confidentiality of a resource can be compromised by a CSRF vulnerability in a legitimate client. Can you define what you mean by CSRF?  I think