On Sat, 14 May 2011 00:34:36 +0200, Ian Hickson <[email protected]> wrote:
On Mon, 14 Feb 2011, Philip Jägenstedt wrote:
For the record, I removed Opera's "support" (I assume it was an
unintended side-effect) for <object data="javascript:..."> along with
the rest at the time when I wrote my previous mail in this thread. This
intentionally doesn't match what the spec says. (Disclaimer: this is
only my opinion on something that isn't really my area of expertise, so
others at Opera might decide that the spec is great and push in the
opposite direction. It seems unlikely at this point, though.)
[...]
Of what has been brought up so far, javascript: as an inline resource is
not very useful at all, so IMO the only reason to keep it would be for
legacy compat. I'll follow up on this again once the change to block
inline javascript: URLs in Opera has been in the wild for a while,
hopefully reporting that no compat issues have arisen.
Since only Firefox now supports this, I've removed support for it from
the
spec. (It's just commented out for now; we can put it back if someone
makes a compelling argument.)
Great! I can report that the changes to block inline javascript: URLs went
into Opera 11.10 and so far I'm not aware of any site compat issues having
being caused by it.
--
Philip Jägenstedt
Core Developer
Opera Software
