[whatwg] Fullscreen and non-HTML elements

2012-04-06 Thread Anne van Kesteren
Hey, The other day I was wondering whether I should change Fullscreen to not be applicable to all elements. I was thinking HTMLElement and SVGSvgElement (svg:svg) would probably be best. My reasoning was that it will not work for svg:rect and such. Just now I noticed

Re: [whatwg] Encoding: big5 and big5-hkscs

2012-04-06 Thread Philip Jägenstedt
On Wed, 04 Apr 2012 18:05:14 +0200, Anne van Kesteren ann...@opera.com wrote: On Fri, 30 Mar 2012 14:00:38 +0200, Anne van Kesteren ann...@opera.com wrote: Ideally someone does detailed content analysis to figure out what the best path forward is here, though I'm not entirely sure how. I

Re: [whatwg] Drag-and-drop folders/files support with directory structure using DirectoryEntry

2012-04-06 Thread Glenn Maynard
On Thu, Apr 5, 2012 at 11:42 PM, Kinuko Yasuda kin...@chromium.org wrote: Does this actually need to be async? The only information you need to create the Entry are the filename and the file type (file or directory), which the browser can load before performing the drop, so no file I/O is

Re: [whatwg] Encoding: big5 and big5-hkscs

2012-04-06 Thread Philip Jägenstedt
On Fri, 06 Apr 2012 12:54:53 +0200, Philip Jägenstedt phil...@opera.com wrote: As a starting point for the spec, I suggest taking the intersection of opera-hk, firefox-hk and chrome-hk. I've written a script in https://gitorious.org/whatwg/big5 to generate the mapping that I think makes

Re: [whatwg] Fullscreen and non-HTML elements

2012-04-06 Thread Anne van Kesteren
On Fri, 06 Apr 2012 16:25:20 +0200, Doug Schepers schep...@w3.org wrote: What's the rationale for restricting what authors (or users) can make fullscreen? You cannot render arbitrary SVG elements without a root svg element as far as I know. -- Anne van Kesteren http://annevankesteren.nl/

Re: [whatwg] Fullscreen and non-HTML elements

2012-04-06 Thread Ian Hickson
On Fri, 6 Apr 2012, Anne van Kesteren wrote: The other day I was wondering whether I should change Fullscreen to not be applicable to all elements. I was thinking HTMLElement and SVGSvgElement (svg:svg) would probably be best. My reasoning was that it will not work for svg:rect and such.

Re: [whatwg] Encoding: big5 and big5-hkscs

2012-04-06 Thread Philip Jägenstedt
On Fri, 06 Apr 2012 15:42:26 +0200, Philip Jägenstedt phil...@opera.com wrote: These are the ranges that need more investigation. Sorry for the monologue, but investigate I did. These are the interesting ones: C6CF = opera-hk: U+FFFD � firefox: U+5EF4 廴 chrome: U+F6DF  firefox-hk:

Re: [whatwg] Fixing two security vulnerabilities in registerProtocolHandler

2012-04-06 Thread Tyler Close
On Mon, Apr 2, 2012 at 4:39 PM, Ian Hickson i...@hixie.ch wrote: On Mon, 26 Sep 2011, Tyler Close wrote: I was recently experimenting with the registerProtocolHandler (RPH) API and came across a couple of security gotchas that make it hard to safely use the API. One of these is already known,

Re: [whatwg] Fixing two security vulnerabilities in registerProtocolHandler

2012-04-06 Thread Ian Hickson
On Fri, 6 Apr 2012, Tyler Close wrote: On Mon, Apr 2, 2012 at 4:39 PM, Ian Hickson i...@hixie.ch wrote: On Mon, 26 Sep 2011, Tyler Close wrote: I was recently experimenting with the registerProtocolHandler (RPH) API and came across a couple of security gotchas that make it hard to

Re: [whatwg] Fixing two security vulnerabilities in registerProtocolHandler

2012-04-06 Thread Tyler Close
On Fri, Apr 6, 2012 at 2:35 PM, Ian Hickson i...@hixie.ch wrote: On Fri, 6 Apr 2012, Tyler Close wrote: On Mon, Apr 2, 2012 at 4:39 PM, Ian Hickson i...@hixie.ch wrote: On Mon, 26 Sep 2011, Tyler Close wrote: I was recently experimenting with the registerProtocolHandler (RPH) API and

Re: [whatwg] Fixing two security vulnerabilities in registerProtocolHandler

2012-04-06 Thread Ian Hickson
On Fri, 6 Apr 2012, Tyler Close wrote: Well if it's an iframe, the parent can't be anything but the original origin, as far as I can tell. What happens if the handler sends the postMessage to *, then the parent is navigated? Will the postMessage be delivered or not? A task queued on a

Re: [whatwg] Fixing two security vulnerabilities in registerProtocolHandler

2012-04-06 Thread Tyler Close
On Fri, Apr 6, 2012 at 3:36 PM, Ian Hickson i...@hixie.ch wrote: On Fri, 6 Apr 2012, Tyler Close wrote: Well if it's an iframe, the parent can't be anything but the original origin, as far as I can tell. What happens if the handler sends the postMessage to *, then the parent is

Re: [whatwg] Fixing two security vulnerabilities in registerProtocolHandler

2012-04-06 Thread Tyler Close
On Mon, Apr 2, 2012 at 4:39 PM, Ian Hickson i...@hixie.ch wrote: On Mon, 26 Sep 2011, Tyler Close wrote: For example, a web mail program might have two registered RPH handlers for mailto: https://example.org/?from=me@companyq=%s; and https://example.org/?from=me@personalq=%s;. The user has