On Thu, Aug 23, 2012 at 11:17 PM, Jonas Sicking wrote:
> On Thu, Aug 23, 2012 at 5:39 PM, Maciej Stachowiak wrote:
>>
>> To expand a little on rationale for what Jeffrey said:
>>
>> We're working on an experimental preference setting for WebKit to block data
>> storage in a third-party context,
On Thu, Aug 23, 2012 at 5:39 PM, Maciej Stachowiak wrote:
>
> To expand a little on rationale for what Jeffrey said:
>
> We're working on an experimental preference setting for WebKit to block data
> storage in a third-party context, similar to the third-party cookie blocking
> feature in many b
Cross posted to h...@whatwg.org two days, but forwarding here since I think
this might be a problem with the spec/implementation.
As it stands now, I think the only way I see out of this pinch is to make
my 404 and 500 error pages return 200 response codes.
Thanks!
Josh
-- Forwarded mess
To expand a little on rationale for what Jeffrey said:
We're working on an experimental preference setting for WebKit to block data
storage in a third-party context, similar to the third-party cookie blocking
feature in many browsers, but covering all forms of client-side storage. The
intent o
On Thu, 23 Aug 2012, Dumez, Christophe wrote:
>
> The latest specification of the structured clone algorithm [1] does not
> indicate that we are supposed to serialize expandos on objects such as
> String, Boolean or Number.
>
> For example:
> var str = new String("test");
> str.foo = 3;
> windo
On Thu, Aug 23, 2012 at 12:13 PM, Dumez, Christophe
wrote:
> Hi,
>
> The latest specification of the structured clone algorithm [1] does
> not indicate that we are supposed to serialize expandos on objects
> such as String, Boolean or Number.
>
> For example:
> var str = new String("test");
> str.
Hi,
The latest specification of the structured clone algorithm [1] does
not indicate that we are supposed to serialize expandos on objects
such as String, Boolean or Number.
For example:
var str = new String("test");
str.foo = 3;
window.postMessage(str, "*");
Isn't str.foo property supposed to b
Hi Boris,
On Aug 22, 2012, at 5:14 PM, Boris Zbarsky wrote:
> On 8/22/12 4:53 PM, Mark Watson wrote:
>> Also, we've considered "heartbeat" type solutions, which whilst better than
>> nothing are vulnerable to an attack in which the heartbeat messages are
>> blocked.
>
> I'd like to understand
