Re: [clipboard] Semi-Trusted Events Alternative

2014-09-16 Thread Hallvord R. M. Steen
>> Not quite :) Check the list of events - mousemove isn't included: >> http://www.w3.org/TR/html5/browsers.html#allowed-to-show-a-popup > I was just going by where I¹ve seen pages pop up windows, and I¹ve seen > pages that pop up windows just by moving the mouse across them. If you see that agai

IndieUI Teleconference Agenda; 17 September at 21:00Z for 60 minutes

2014-09-16 Thread Janina Sajka
Cross-posting as before ... What: IndieUI Task Force Teleconference When: Wednesday 17 September 2:00 PMSan Francisco -- U.S. Pacific (Daylight) Time (PDT: UTC -7) 4:00 PMAustin -- U.S. Central (Daylight) Time (CDT: UTC -5) 5:00 PMBoston

Re: innerText spec

2014-09-16 Thread Ian Hickson
On Tue, 16 Sep 2014, Ryosuke Niwa wrote: > > Is either one of you working on innerText specification? > (http://lists.w3.org/Archives/Public/www-archive/2014Mar/0008.html) > > I think we need it for the selection API specification because the > concept of being “visually equivalent” and selecti

innerText spec

2014-09-16 Thread Ryosuke Niwa
Hi, Is either one of you working on innerText specification? (http://lists.w3.org/Archives/Public/www-archive/2014Mar/0008.html) I think we need it for the selection API specification because the concept of being “visually equivalent” and selection.toString need to be defined in terms of it. -

Re: [clipboard] Semi-Trusted Events Alternative

2014-09-16 Thread Jeffrey Walton
On Tue, Sep 16, 2014 at 5:30 AM, Hallvord R. M. Steen wrote: >... if we get it right we've enabled some more functionality > for web apps without too much nuisance and abuse - > if we get it wrong, we probably have to revisit this and > lock it down with site whitelists and such. Keeping in mind >

Re: [clipboard] Semi-Trusted Events Alternative

2014-09-16 Thread Brian Matthews (brmatthe)
On 9/16/14, 5:22 AM, "James M. Greene" mailto:james.m.gre...@gmail.com>> wrote: > We did some user research on this feature when we were building our most > recent flagship product a few years back. Our users' reactions to a sane site > enhancing their clipboard data were unanimously delighted

Re: [clipboard] Semi-Trusted Events Alternative

2014-09-16 Thread Brian Matthews (brmatthe)
>> a page can wipe out my entire clipboard history if I move my mouse over >>it. > Not quite :) Check the list of events - mousemove isn't included: > http://www.w3.org/TR/html5/browsers.html#allowed-to-show-a-popup I was just going by where I¹ve seen pages pop up windows, and I¹ve seen pages tha

[Bug 13952] Specify selection change events

2014-09-16 Thread bugzilla
https://www.w3.org/Bugs/Public/show_bug.cgi?id=13952 Ryosuke Niwa changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 24083] Window.getSelection() and HTMLDocument.getSelection() should return a nullable

2014-09-16 Thread bugzilla
https://www.w3.org/Bugs/Public/show_bug.cgi?id=24083 Ryosuke Niwa changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: PSA: publishing new WD of Clipboard API and events on Sept 18

2014-09-16 Thread James M. Greene
Regardless of protocol, a site that contains sensitive data should be implemented such that it doesn't use this API nor include any unverified 3rd party libraries/extension that may. They should also only utilize a feature such as this in obvious ways (i.e. by having the user click on a "copy" butt

Re: PSA: publishing new WD of Clipboard API and events on Sept 18

2014-09-16 Thread Jeffrey Walton
On Mon, Sep 15, 2014 at 9:06 PM, Daniel Cheng wrote: > Again, what are you trying to defend against? Why is it beneficial to try to > block this? At minimum, its information leakage. If the data has value such that at least one leg requires HTTPS, then traversing some legs with HTTP is a security

Re: [clipboard] Semi-Trusted Events Alternative

2014-09-16 Thread James M. Greene
We did some user research on this feature when we were building our most recent flagship product a few years back. Our users' reactions to a sane site enhancing their clipboard data were unanimously delighted rather than upset/offended/horrified. As Hallvord said, sites have been able to do this f

Re: PSA: Extensible Web Summit in Berlin September 11

2014-09-16 Thread Arthur Barstow
On 7/9/14 4:15 PM, Arthur Barstow wrote: [ Bcc: public-pointer-events ] FYI, Robin reports the availability of minutes from the September 11 EWS in Berlin: [[ as you may know, last week the second edition of the "Extensible Web Summit" took place in Berlin. It was fun an interesting. The

Re: [clipboard] Semi-Trusted Events Alternative

2014-09-16 Thread Hallvord R. M. Steen
> a page can wipe out my > entire clipboard history if I move my mouse over it. Not quite :) Check the list of events - mousemove isn't included: http://www.w3.org/TR/html5/browsers.html#allowed-to-show-a-popup I agree that all the concerns you listed are real. I recall an article I've seen abou

Re: PSA: publishing new WD of Clipboard API and events on Sept 18

2014-09-16 Thread Hallvord R. M. Steen
> Wouldn't it be better for the user if a consistent policy were applied > across the board when handling their data? Not if the average user can't understand the policy that is applied, and the way it applies to what they are trying to achieve. > Proper handling of the data shifts the onus to

[Bug 26815] New: [Shadow]:

2014-09-16 Thread bugzilla
https://www.w3.org/Bugs/Public/show_bug.cgi?id=26815 Bug ID: 26815 Summary: [Shadow]: Product: WebAppsWG Version: unspecified Hardware: All OS: All Status: NEW Severity: minor Priority: P2