Re: [whatwg] The problem of duplicate ID as a security issue

2007-06-08 Thread Ian Hickson
On Thu, 7 Jun 2007, Alexey Feldgendler wrote: On Thu, 07 Jun 2007 00:42:31 +0200, Ian Hickson [EMAIL PROTECTED] wrote: IDs in user-supplied content are only useful as fragment identifiers for URLs, and mangling them like that defeats this use case because you don't know N before you

Re: [whatwg] CR entities and LFCR

2007-06-08 Thread Anne van Kesteren
On Thu, 07 Jun 2007 23:12:38 +0200, Michael A. Puls II [EMAIL PROTECTED] wrote: On 6/7/07, Anne van Kesteren [EMAIL PROTECTED] wrote: These should be converted to LF too. One thing that might be interesting to look into is the handling of LFCR in browsers (as opposed to CRLF). I haven't done

Re: [whatwg] The problem of duplicate ID as a security issue

2007-06-08 Thread Alexey Feldgendler
On Fri, 08 Jun 2007 08:13:07 +0200, Ian Hickson [EMAIL PROTECTED] wrote: True. I don't have a good solution to this that doesn't involve code on the server-side, though. Some form of sandboxing would be one. If sandboxing would solve it then I'll treat this issue as closed and deal with

Re: [whatwg] CR entities and LFCR

2007-06-08 Thread Henri Sivonen
On Jun 7, 2007, at 15:00, Anne van Kesteren wrote: These should be converted to LF too. One thing that might be interesting to look into is the handling of LFCR in browsers (as opposed to CRLF). I haven't done that yet... Some browsers (just tested Opera) also normalize two newline

Re: [whatwg] CR entities and LFCR

2007-06-08 Thread Kristof Zelechovski
Oops. I would swear that text mode input is performed by the operating system. It turns out I was wrong and the POSIX compatibility layer is provided by the compiler vendor. That means the exact behavior depends indeed. Thanks for the clarification. Cheers Chris (You never know what you know)

Re: [whatwg] HTML5Lib Test Suite vs. PHP 5 HTML Parser

2007-06-08 Thread Thomas Broyer
2007/6/8, Michel Fortin: Perhaps someone will find this raw data interesting. I've made a script to run the HTML5Lib test cases against the built-in HTML parser in PHP 5. And here's the result: http://www.michelf.com/docs/html5libtests-vs-php5html.html Have you tried PH5P (pure PHP HTML5

Re: [whatwg] CR entities and LFCR

2007-06-08 Thread Michael A. Puls II
On 6/8/07, Anne van Kesteren [EMAIL PROTECTED] wrote: On Thu, 07 Jun 2007 23:12:38 +0200, Michael A. Puls II [EMAIL PROTECTED] wrote: On 6/7/07, Anne van Kesteren [EMAIL PROTECTED] wrote: These should be converted to LF too. One thing that might be interesting to look into is the handling of

[whatwg] HTML5Lib Test Suite vs. PHP 5 HTML Parser

2007-06-08 Thread Michel Fortin
Perhaps someone will find this raw data interesting. I've made a script to run the HTML5Lib test cases against the built-in HTML parser in PHP 5. And here's the result: http://www.michelf.com/docs/html5libtests-vs-php5html.html As far as I know, PHP 5 use libxml2 as its HTML parser.

Re: [whatwg] Still more comments and questions on Web Apps 1.0

2007-06-08 Thread Ian Hickson
On Mon, 20 Mar 2006, Henri Sivonen wrote: 5.1.1. I think the spec should suggest shift-return as the key combo for inserting a line separator to make it even more clear that plain return should break the block. Done. 5.1.1. (Updating the default* DOM attributes causes content attributs

Re: [whatwg] id and xml:id

2007-06-08 Thread Ian Hickson
On Sun, 2 Apr 2006, Henri Sivonen wrote: Since UAs handle whitespace in the id attribute inconsistently (see below) Note that there is interoperability (in that, we have two browsers that do the same thing, and one of those is IE, even). old specs imply or require whitespace trimming Old

Re: [whatwg] Still more comments and questions on Web Apps 1.0

2007-06-08 Thread Michel Fortin
Le 2007-06-08 à 21:05, Ian Hickson a écrit : 8.2.2.1. Append that character to the Document node. Having text nodes outside the root elements is at least a bit surprising if nothing else. I don't disagree. Should we just drop these spaces on the floor? It doesn't seem like the best thing