Re: Security use cases for packaging

2015-01-30 Thread Daniel Kahn Gillmor
On Fri 2015-01-30 01:50:43 -0500, Yan Zhu wrote: Say that resource Y is a javascript file that listens for users typing in password fields and shows them a warning if the password is weak. The user verifies and loads the HTML page that includes Y but an attacker then blocks the request to

Re: Minimum viable custom elements

2015-01-30 Thread Anne van Kesteren
On Fri, Jan 30, 2015 at 11:05 AM, Steve Faulkner faulkner.st...@gmail.com wrote: In this radio and checkbox example (view in chrome) https://rawgit.com/alice/web-components-demos/master/index.html (which has been referenced several times in this thread, but no one has critiqued to my

Re: Security use cases for packaging

2015-01-30 Thread Chris Palmer
On Thu, Jan 29, 2015 at 10:50 PM, Yan Zhu y...@yahoo-inc.com wrote: Say that resource Y is a javascript file that listens for users typing in password fields and shows them a warning if the password is weak. The user verifies and loads the HTML page that includes Y but an attacker then

Re: Minimum viable custom elements

2015-01-30 Thread Ryosuke Niwa
On Jan 30, 2015, at 10:22 AM, Alice Boxhall aboxh...@google.com wrote: On Fri, Jan 30, 2015 at 8:46 AM, Anne van Kesteren ann...@annevk.nl mailto:ann...@annevk.nl wrote: On Fri, Jan 30, 2015 at 11:05 AM, Steve Faulkner faulkner.st...@gmail.com mailto:faulkner.st...@gmail.com wrote: In

Re: Minimum viable custom elements

2015-01-30 Thread fantasai
On 01/30/2015 07:54 PM, Ryosuke Niwa wrote: On Jan 30, 2015, at 10:22 AM, Alice Boxhall aboxh...@google.com mailto:aboxh...@google.com wrote: The only way it overcomes that is by relying on a proprietary extension called -webkit-appearance that is not standardized and does not

Re: Minimum viable custom elements

2015-01-30 Thread Tantek Çelik
I'm tracking the state of requests for 'appearance' here: https://wiki.csswg.org/spec/css4-ui#appearance Feel free to directly edit that wiki page and add more concrete data / research that you think will help make a decision in terms of design etc. For now, there is insufficient data to show

[Bug 27931] New: Override 'flex' and 'transform' styling

2015-01-30 Thread bugzilla
https://www.w3.org/Bugs/Public/show_bug.cgi?id=27931 Bug ID: 27931 Summary: Override 'flex' and 'transform' styling Product: WebAppsWG Version: unspecified Hardware: PC OS: All Status: NEW Severity:

Re: =[xhr]

2015-01-30 Thread Frederik Braun
Hi, Thank you for your feedback. Please see the archives for previous iterations of this discussion, e.g. https://lists.w3.org/Archives/Public/public-webapps/2014JulSep/0084.html (and click next in thread). On 29.01.2015 21:04, LOUIFI, Bruno wrote: Hi, I am really disappointed when I saw in

Re: Minimum viable custom elements

2015-01-30 Thread Bruce Lawson
On 29 January 2015 at 19:48, Ryosuke Niwa rn...@apple.com wrote: And we have a proposal to do both of these things: decorators [1] yes, indeed. What is the status of decorators? Last I looked, it had been removed from the web components umbrella, so I thought it had been sent to a farm upstate,

=[xhr]

2015-01-30 Thread LOUIFI, Bruno
Hi, I am really disappointed when I saw in Chrome debugger that the XMLHttpRequest.open() is deprecating the synchronous mode. This is was the worst news I red since I started working on web applications. I don't know if you release the negative impacts on our professional applications. We