Re: [webstorage] origin security check

2011-06-14 Thread Scott Wilson
On 14 Jun 2011, at 06:28, Marcos Caceres wrote: > On Monday, June 13, 2011, Ian Hickson wrote: >> On Mon, 13 Jun 2011, Marcos Caceres wrote: >>> >>> I thought maybe I could get away with: >>> >>> "When getting or setting the preferences attribute, if the origin of a >>> widget instance is muta

Re: [webstorage] origin security check

2011-06-13 Thread Marcos Caceres
On Monday, June 13, 2011, Ian Hickson wrote: > On Mon, 13 Jun 2011, Marcos Caceres wrote: >> >> I thought maybe I could get away with: >> >> "When getting or setting the preferences attribute, if the origin of a >> widget instance is mutable (e.g., if the user agent allows >> document.domain to be

Re: [webstorage] origin security check

2011-06-13 Thread Ian Hickson
On Mon, 13 Jun 2011, Marcos Caceres wrote: > > I thought maybe I could get away with: > > "When getting or setting the preferences attribute, if the origin of a > widget instance is mutable (e.g., if the user agent allows > document.domain to be dynamically changed), then the user agent must >

Re: [webstorage] origin security check

2011-06-13 Thread Marcos Caceres
On Fri, Jun 10, 2011 at 8:19 PM, Ian Hickson wrote: > On Fri, 10 Jun 2011, Marcos Caceres wrote: >> >> I tried to create a generic HTML test for this using localStorage, but >> could not figure out a way to trigger the SECURITY_ERR. I asked a few >> people (Lachy, Snedders, and even the guy that i

Re: [webstorage] origin security check

2011-06-13 Thread Marcos Caceres
On Fri, Jun 10, 2011 at 8:17 PM, Ian Hickson wrote: > On Fri, 10 Jun 2011, Marcos Caceres wrote: >> On Thu, Jun 9, 2011 at 6:07 PM, Ian Hickson wrote: >> > On Thu, 9 Jun 2011, Marcos Caceres wrote: >> >> >> >> tiny quick editorial request, where the spec says: >> >> >> >> "When the localStorage a

Re: [webstorage] origin security check

2011-06-10 Thread Ian Hickson
On Fri, 10 Jun 2011, Marcos Caceres wrote: > > I tried to create a generic HTML test for this using localStorage, but > could not figure out a way to trigger the SECURITY_ERR. I asked a few > people (Lachy, Snedders, and even the guy that implemented Web Storage > at Opera!) to help me come up

Re: [webstorage] origin security check

2011-06-10 Thread Ian Hickson
On Fri, 10 Jun 2011, Marcos Caceres wrote: > On Thu, Jun 9, 2011 at 6:07 PM, Ian Hickson wrote: > > On Thu, 9 Jun 2011, Marcos Caceres wrote: > >> > >> tiny quick editorial request, where the spec says: > >> > >> "When the localStorage attribute is accessed, the user agent must run > >> the follow

Re: [webstorage] origin security check

2011-06-10 Thread Marcos Caceres
Hi Ian, On Fri, Jun 10, 2011 at 9:26 AM, Marcos Caceres wrote: > On Thu, Jun 9, 2011 at 6:07 PM, Ian Hickson wrote: >> On Thu, 9 Jun 2011, Marcos Caceres wrote: >>> >>> tiny quick editorial request, where the spec says: >>> >>> "When the localStorage attribute is accessed, the user agent must ru

Re: [webstorage] origin security check

2011-06-10 Thread Marcos Caceres
On Thu, Jun 9, 2011 at 6:07 PM, Ian Hickson wrote: > On Thu, 9 Jun 2011, Marcos Caceres wrote: >> >> tiny quick editorial request, where the spec says: >> >> "When the localStorage attribute is accessed, the user agent must run >> the following steps:" >> >> Can you please change that to: >> >> "W

Re: [webstorage] origin security check

2011-06-09 Thread Ian Hickson
On Thu, 9 Jun 2011, Marcos Caceres wrote: > > tiny quick editorial request, where the spec says: > > "When the localStorage attribute is accessed, the user agent must run > the following steps:" > > Can you please change that to: > > "When the localStorage attribute is accessed, the user agent m

[webstorage] origin security check

2011-06-09 Thread Marcos Caceres
Hi Ian, tiny quick editorial request, where the spec says: "When the localStorage attribute is accessed, the user agent must run the following steps:" Can you please change that to: "When the localStorage attribute is accessed, the user agent must run the origin security check." And then indepe