Re: [Bindings] extended attribute for callback function interfaces?

2008-11-24 Thread Jonas Sicking
Cameron McCormack wrote: Jonas Sicking: Why do we need the FunctionOnly/PropertyOnly feature? In gecko we don't have that functionality and it hasn't caused any problems that I can think of. I took David’s feedback to mean that sometimes you want to state that a single-function interface

Re: [XHR] security issue with spec's same-origin and the Document pointer

2008-11-24 Thread Hallvord R. M. Steen
On Sun, 23 Nov 2008 22:32:02 +0100, Anne van Kesteren [EMAIL PROTECTED] wrote: var xhrConstructor = iframe.contentWindow.XMLHttpRequest; iframe.src='http://attackee.example.com/'; . . var xhr = new xhrConstructor(); When the constructor is invoked here, the associated document of its

Re: [XHR] security issue with spec's same-origin and the Document pointer

2008-11-24 Thread Ian Hickson
On Mon, 24 Nov 2008, Hallvord R. M. Steen wrote: The point is that there *is* no document pointer until you call the constructur - per the spec. And once that script calls the constructor and the document pointer is created, the associated window has a different document in it from a

Re: Widget testing

2008-11-24 Thread Marcos Caceres
Hi Kai! On Fri, Nov 7, 2008 at 1:16 PM, Kai Hendry [EMAIL PROTECTED] wrote: Hey guys, I have an action to tell you what I've been upto WRT widgets http://www.w3.org/2008/11/04-mwts-minutes.html#action02 I've started working one day a week on widget testing. My own git repo is here:

Re: Widget testing

2008-11-24 Thread Thomas Roessler
On 24 Nov 2008, at 22:46, Marcos Caceres wrote: Subject: http://dev.w3.org/2006/waf/widgets/#the-license Having a optional URI or href whatever for the license would be good. Seems to be some inconsistency between src, uri, url, href btw that you can easily pick up in the relaxng scheme. I'm

Re: Widget testing

2008-11-24 Thread Marcos Caceres
On Mon, Nov 24, 2008 at 10:04 PM, Thomas Roessler [EMAIL PROTECTED] wrote: On 24 Nov 2008, at 22:46, Marcos Caceres wrote: Subject: http://dev.w3.org/2006/waf/widgets/#the-license Having a optional URI or href whatever for the license would be good. Seems to be some inconsistency between

Could we add setCapture to DOM Events?

2008-11-24 Thread Ian Hickson
Web Apps WG, Would it be possible to add setCapture() (as supported in IE; see below) to DOM3 Events? It seems more appropriate to have it there than in HTML5. Note that I don't think we'd need releaseCapture(); we should just say that capture is canceled when the mouse is released if it was