Re: further with transfers (Re: Clipboard actions BOF table at W3C TPAC)

2008-10-23 Thread Paul Libbrecht

Ian,

Can you please respond to my request how to implement other flavour  
names?


Also, I would like to see test-cases and reports for the  
implementations you indicate here.


paul




Le 22-oct.-08 à 17:02, Ian Hickson a écrit :

On Wed, 22 Oct 2008, Charles McCathieNevile wrote:
Ian, how stable do you think this bit of the HTML5 spec is? (I  
haven't

looked yet...)


Drag and drop is very stable, it's implemented in three browsers now.
There's some outstanding feedback, but not much. The implementation of
copy and paste in terms of drag and drop (a design motivated  
primarily by
accessibility and security concerns) is not widely implemented,  
though I

have no pending feedback regarding changes to that.




smime.p7s
Description: S/MIME cryptographic signature


Re: further with transfers (Re: Clipboard actions BOF table at W3C TPAC)

2008-10-23 Thread Ian Hickson

On Thu, 23 Oct 2008, Paul Libbrecht wrote:
 
 Can you please respond to my request how to implement other flavour 
 names?

The getData() and setData() functions take arbitrary MIME types; does that 
cover it?


 Also, I would like to see test-cases and reports for the implementations 
 you indicate here.

Yes, that would be good. Implementors? Are there test cases for this 
section?

-- 
Ian Hickson   U+1047E)\._.,--,'``.fL
http://ln.hixie.ch/   U+263A/,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'



RE: further with transfers (Re: Clipboard actions BOF table at W3C TPAC)

2008-10-23 Thread Chris Wilson

Paul Libbrecht wrote:
 Yesterday, discussion with Chris Wilson and Adrian Bateman, of MSIE
 team, revealed that allowing arbitrary flavours would be a big
 security hole for Windows at least (I believe this is Windows only but
 can't confirm yet).

I wouldn't call it a security hole as much as I would call it unbounded attack 
surface area.  :)  At any rate, it would be surface area for any OS that 
allowed arbitrary types on the clipboard; this isn't a Windows implementation 
issue.

 A safer approach may be to require that the browsers make sure the
 things sipped into the clipboard/drag-content are only safe things.

That's the rub of my feedback, yes.

-Chris