* Lachlan Hunt <[email protected]> wrote:
Also, implementers need to be take care with vendor specific schemes: * chrome: (Mozilla, Chrome)
We should probably block these too, for consistency.
* view-source: (Mozilla, Chrome)
This might have a valid use case in web-based editors like ACE: http://ajaxorg.github.com/ace/build/editor.html(At the cost of not being able to edit and reload the cached version of the page.)
-- Wilhelm Joys Andersen Core, Opera Software
