Permalink
Browse files

[gow] (2) Block cross-origin PUT and DELETE from <form>s for now.

Fixing http://www.w3.org/Bugs/Public/show_bug.cgi?id=7709

git-svn-id: http://svn.whatwg.org/webapps@4042 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information...
1 parent f7805b2 commit 5110354b35f96026e28d5f120f7f93fd20b6b3cb @Hixie Hixie committed Sep 29, 2009
Showing with 38 additions and 16 deletions.
  1. +19 −8 index
  2. +19 −8 source
View
27 index
@@ -39004,9 +39004,15 @@ fur
<dd>Let <var title="">MIME type</var> be "<code title="">text/plain</code>".</dd>
- </dl><p><a href=#navigate>Navigate</a> <var title="">target browsing
- context</var> to <var title="">action</var> using the HTTP
- method given by <var title="">method</var> and with <var title="">entity body</var> as the entity body, of type <var title="">MIME type</var>. If <var title="">target browsing
+ </dl><p>If <var title="">method</var> is anything but GET or POST,
+ and the <a href=#origin>origin</a> of <var title="">action</var> is not
+ the <a href=#same-origin>same origin</a> as that of the <code><a href=#the-form-element>form</a></code>
+ element's <code>Document</code>, then abort these steps.</p>
+ <!-- CORS, one day -->
+
+ <p>Otherwise, <a href=#navigate>navigate</a> <var title="">target
+ browsing context</var> to <var title="">action</var> using the
+ HTTP method given by <var title="">method</var> and with <var title="">entity body</var> as the entity body, of type <var title="">MIME type</var>. If <var title="">target browsing
context</var> was newly created for this purpose by the steps
above, then it must be navigated with <a href=#replacement-enabled>replacement
enabled</a>.</p>
@@ -39019,11 +39025,16 @@ fur
<p>Let <var title="">target browsing context</var> be <a href=#the-form-submission-target-browsing-context>the
form submission target browsing context</a>.</p>
- <p><a href=#navigate>Navigate</a> <var title="">target browsing
- context</var> to <var title="">action</var> using the DELETE
- method. If <var title="">target browsing context</var> was newly
- created for this purpose by the steps above, then it must be
- navigated with <a href=#replacement-enabled>replacement enabled</a>.</p>
+ <p>If the <a href=#origin>origin</a> of <var title="">action</var> is
+ not the <a href=#same-origin>same origin</a> as that of the
+ <code><a href=#the-form-element>form</a></code> element's <code>Document</code>, then abort
+ these steps.</p> <!-- CORS, one day -->
+
+ <p>Otherwise, <a href=#navigate>navigate</a> <var title="">target
+ browsing context</var> to <var title="">action</var> using the
+ DELETE method. If <var title="">target browsing context</var>
+ was newly created for this purpose by the steps above, then it
+ must be navigated with <a href=#replacement-enabled>replacement enabled</a>.</p>
</dd>
View
27 source
@@ -43758,9 +43758,15 @@ fur
</dl>
- <p><span>Navigate</span> <var title="">target browsing
- context</var> to <var title="">action</var> using the HTTP
- method given by <var title="">method</var> and with <var
+ <p>If <var title="">method</var> is anything but GET or POST,
+ and the <span>origin</span> of <var title="">action</var> is not
+ the <span>same origin</span> as that of the <code>form</code>
+ element's <code>Document</code>, then abort these steps.</p>
+ <!-- CORS, one day -->
+
+ <p>Otherwise, <span>navigate</span> <var title="">target
+ browsing context</var> to <var title="">action</var> using the
+ HTTP method given by <var title="">method</var> and with <var
title="">entity body</var> as the entity body, of type <var
title="">MIME type</var>. If <var title="">target browsing
context</var> was newly created for this purpose by the steps
@@ -43775,11 +43781,16 @@ fur
<p>Let <var title="">target browsing context</var> be <span>the
form submission target browsing context</span>.</p>
- <p><span>Navigate</span> <var title="">target browsing
- context</var> to <var title="">action</var> using the DELETE
- method. If <var title="">target browsing context</var> was newly
- created for this purpose by the steps above, then it must be
- navigated with <span>replacement enabled</span>.</p>
+ <p>If the <span>origin</span> of <var title="">action</var> is
+ not the <span>same origin</span> as that of the
+ <code>form</code> element's <code>Document</code>, then abort
+ these steps.</p> <!-- CORS, one day -->
+
+ <p>Otherwise, <span>navigate</span> <var title="">target
+ browsing context</var> to <var title="">action</var> using the
+ DELETE method. If <var title="">target browsing context</var>
+ was newly created for this purpose by the steps above, then it
+ must be navigated with <span>replacement enabled</span>.</p>
</dd>

0 comments on commit 5110354

Please sign in to comment.