Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Data URLs are not allowed to open top-level browsing contexts #1238

Closed
mattgarrish opened this issue Apr 19, 2021 · 0 comments
Closed

Data URLs are not allowed to open top-level browsing contexts #1238

mattgarrish opened this issue Apr 19, 2021 · 0 comments
Labels
spec: EPUB 3.3 Impacting the support of EPUB 3.3 status: completed Work completed, can be closed
Milestone

Comments

@mattgarrish
Copy link
Member

Data URLs are forbidden from

  • manifest items
  • href attributes in svg and html (except when the document is loaded inside an iframe)

It's also technically forbidden from script window.open and document.open calls, but not sure we can enforce.

@mattgarrish mattgarrish added the spec: EPUB 3.3 Impacting the support of EPUB 3.3 label Apr 19, 2021
@rdeltour rdeltour added the status: accepted Ready to be further processed label Nov 13, 2021
@rdeltour rdeltour added this to the v5.0.0-beta-1 milestone Nov 13, 2021
@rdeltour rdeltour added status: ready for implem The issue is ready to be implemented and removed status: accepted Ready to be further processed labels Jan 23, 2022
@rdeltour rdeltour added status: in progress The issue is being implemented by the development team and removed status: ready for implem The issue is ready to be implemented labels Nov 15, 2022
@rdeltour rdeltour added status: completed Work completed, can be closed and removed status: in progress The issue is being implemented by the development team labels Dec 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
spec: EPUB 3.3 Impacting the support of EPUB 3.3 status: completed Work completed, can be closed
Projects
None yet
Development

No branches or pull requests

2 participants