Re: [whatwg] Iframe Sandbox Attribute - allow-plugins?

2012-01-19 Thread Ian Hickson
On Wed, 13 Jul 2011, John Richards wrote: > > Are there plans to have an 'allow-plugins' value? > > I'm assuming there will be use-cases where the only protection that is > desired is prevention of parent redirection. On Wed, 13 Jul 2011, Adam Barth wrote: > > Adding allow-plugins today would d

Re: [whatwg] Iframe Sandbox Attribute - allow-plugins?

2011-07-15 Thread Julian Reschke
On 2011-07-14 17:01, Jonas Sicking wrote: ... True. I would be fine with removing the plugin requirement. Or changing it such that it states that plugins can only be loaded if it's done in a manner that ensures that all other requirements are still fulfilled. Or just dealing with this once there

Re: [whatwg] Iframe Sandbox Attribute - allow-plugins?

2011-07-14 Thread Jonas Sicking
On Thu, Jul 14, 2011 at 1:16 AM, Julian Reschke wrote: > On 2011-07-14 08:22, Jonas Sicking wrote: >> >> On Wed, Jul 13, 2011 at 9:49 PM, Anne van Kesteren >>  wrote: >>> >>> On Wed, 13 Jul 2011 23:13:05 +0200, Julian Reschke >>>  wrote: Yes, but we can *define* the flag in HTML and writ

Re: [whatwg] Iframe Sandbox Attribute - allow-plugins?

2011-07-14 Thread Julian Reschke
On 2011-07-14 08:22, Jonas Sicking wrote: On Wed, Jul 13, 2011 at 9:49 PM, Anne van Kesteren wrote: On Wed, 13 Jul 2011 23:13:05 +0200, Julian Reschke wrote: Yes, but we can *define* the flag in HTML and write down what it means with respect to plugin APIs. It seems much better to wait

Re: [whatwg] Iframe Sandbox Attribute - allow-plugins?

2011-07-13 Thread Jonas Sicking
On Wed, Jul 13, 2011 at 9:49 PM, Anne van Kesteren wrote: > > On Wed, 13 Jul 2011 23:13:05 +0200, Julian Reschke > wrote: >> >> Yes, but we can *define* the flag in HTML and write down what it means with >> respect to plugin APIs. > > It seems much better to wait until it can actually be implem

Re: [whatwg] Iframe Sandbox Attribute - allow-plugins?

2011-07-13 Thread Anne van Kesteren
On Wed, 13 Jul 2011 23:13:05 +0200, Julian Reschke wrote: Yes, but we can *define* the flag in HTML and write down what it means with respect to plugin APIs. It seems much better to wait until it can actually be implemented. -- Anne van Kesteren http://annevankesteren.nl/

Re: [whatwg] Iframe Sandbox Attribute - allow-plugins?

2011-07-13 Thread Julian Reschke
On 2011-07-13 22:58, Adam Barth wrote: On Wed, Jul 13, 2011 at 1:55 PM, Julian Reschke wrote: On 2011-07-13 22:31, Adam Barth wrote: Adding allow-plugins today would defeat the prevention of parent redirection. The short answer is we need an API for informing plugins of the sandbox flags and

Re: [whatwg] Iframe Sandbox Attribute - allow-plugins?

2011-07-13 Thread Adam Barth
On Wed, Jul 13, 2011 at 1:55 PM, Julian Reschke wrote: > On 2011-07-13 22:31, Adam Barth wrote: >> Adding allow-plugins today would defeat the prevention of parent >> redirection. >> >> The short answer is we need an API for informing plugins of the >> sandbox flags and a way of confirming that th

Re: [whatwg] Iframe Sandbox Attribute - allow-plugins?

2011-07-13 Thread Julian Reschke
On 2011-07-13 22:31, Adam Barth wrote: Adding allow-plugins today would defeat the prevention of parent redirection. The short answer is we need an API for informing plugins of the sandbox flags and a way of confirming that the plugins understand those bits before we can allow plugins inside san

Re: [whatwg] Iframe Sandbox Attribute - allow-plugins?

2011-07-13 Thread Adam Barth
Adding allow-plugins today would defeat the prevention of parent redirection. The short answer is we need an API for informing plugins of the sandbox flags and a way of confirming that the plugins understand those bits before we can allow plugins inside sandboxed frames. Adam On Wed, Jul 13, 20

[whatwg] Iframe Sandbox Attribute - allow-plugins?

2011-07-13 Thread John Richards
http://www.whatwg.org/specs/web-apps/current-work/multipage/the-iframe-element.html#attr-iframe-sandbox Are there plans to have an 'allow-plugins' value? I'm assuming there will be use-cases where the only protection that is desired is prevention of parent redirection. Thanks