Re: [widgets] Minutes from 30 October 2008 Voice Conference

2008-11-23 Thread Marcos Caceres
Hi Larry, On Sun, Nov 23, 2008 at 4:54 AM, Larry Masinter [EMAIL PROTECTED] wrote: Resolving the general topic of ZIP-based packages and URI references within them on the webapp mailing list doesn't seem practical, because those who need to review the package/URI issue are likely not

Re: Comments on Widgets 1.0: Requirements LCWD

2008-11-23 Thread Marcos Caceres
Hi Krzysztof, 2008/11/3 Krzysztof Maczyński [EMAIL PROTECTED]: Marcos, Sorry for the delay in replying. When you wrote to me on 14 October, I was in the Near East with very occasional Internet access. I'll understand if at this moment it's to late to give my input the full weight in your

Re: [XHR] security issue with spec's same-origin and the Document pointer

2008-11-23 Thread Hallvord R. M. Steen
On Fri, 21 Nov 2008 21:14:59 +0100, Anne van Kesteren [EMAIL PROTECTED] wrote: var xhrConstructor = iframe.contentWindow.XMLHttpRequest; iframe.src='http://attackee.example.com/'; . . var xhr = new xhrConstructor(); When the constructor is invoked here, the associated document of its

Re: [XHR] security issue with spec's same-origin and the Document pointer

2008-11-23 Thread Anne van Kesteren
On Sun, 23 Nov 2008 18:13:41 +0100, Hallvord R. M. Steen [EMAIL PROTECTED] wrote: On Fri, 21 Nov 2008 21:14:59 +0100, Anne van Kesteren [EMAIL PROTECTED] wrote: var xhrConstructor = iframe.contentWindow.XMLHttpRequest; iframe.src='http://attackee.example.com/'; . . var xhr = new

Re: Comments on some Web IDL extended attribute names

2008-11-23 Thread Cameron McCormack
Maciej Stachowiak: I think [NativeObject] should be renamed to [Callback]. It is meant to be used for callback objects that have a single designated callback method, right? Cameron McCormack: Not only a single callback method, perhaps multiple. But yes, it’s pretty much for callbacks.

Re: [selectors-api] Investigating NSResolver Alternatives

2008-11-23 Thread Cameron McCormack
This is moot now that NSResolver is gone from selector-api, but… Boris Zbarsky: The way I see it, all current impls should throw something if more than one arg is passed Lachlan Hunt: Which exception should be thrown? Is this something I should define in this spec, or is it

Re: [Bindings] extended attribute for callback function interfaces?

2008-11-23 Thread Jonas Sicking
Cameron McCormack wrote: Hi David. Cameron McCormack: [re allowing a Function to implement a callback interface] I believe this is already handled for all such interfaces, in the last paragraph of section 4.4: L. David Baron: I'm not sure if you want it to be handled for all such

Re: [Bindings] extended attribute for callback function interfaces?

2008-11-23 Thread Cameron McCormack
Jonas Sicking: Why do we need the FunctionOnly/PropertyOnly feature? In gecko we don't have that functionality and it hasn't caused any problems that I can think of. I took David’s feedback to mean that sometimes you want to state that a single-function interface can’t be implemented by a