Skip to content
Permalink
Browse files
[giow] (0) Drop javascript: support from <img src>, <object data>, CS…
…S, etc, etc, etc.

git-svn-id: http://svn.whatwg.org/webapps@6139 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information
Hixie committed May 13, 2011
1 parent 99c32bf commit 6e71d469eea02e95140a9d4c76563bcb6bc5744e
Showing with 35 additions and 16 deletions.
  1. +15 −8 complete.html
  2. +15 −8 index
  3. +5 −0 source
@@ -67027,24 +67027,31 @@ <h4 id=javascript-protocol><span class=secno>7.1.5 </span><dfn title="javascript

</dd>

<dt>If the <code><a href=#document>Document</a></code> object of the element,
<!--(turns out only Firefox does this, and only for <img src=""> and a
few others, so it's commented out for now pending someone having
a convincing use case)

<dt>If the <code>Document</code> object of the element,
attribute, or style sheet from which the <code>javascript:</code>
URL was reached has an associated <a href=#browsing-context>browsing
context</a></dt>
URL was reached has an associated <span>browsing
context</span></dt>

<dd>

<p><a href=#create-an-impotent-script>Create an impotent script</a> using the
<p><span>Create an impotent script</span> using the
aforementioned script source, with the scripting language set to
JavaScript, and with the <code><a href=#document>Document</a></code>'s object's
<a href=#browsing-context>browsing context</a> as the browsing context.</p>
JavaScript, and with the <code>Document</code>'s object's
<span>browsing context</span> as the browsing context.</p>

<p>Let <var title="">result</var> be the return value of the
<i><a href=#initial-code-entry-point>initial code entry-point</a></i> of this <a href=#concept-script title=concept-script>script</a>. If an exception was
<i>initial code entry-point</i> of this <span
title="concept-script">script</span>. If an exception was
raised, let <var title="">result</var> be void instead. (The
result will be void also if <a href=#concept-bc-noscript title=concept-bc-noscript>scripting is disabled</a>.)</p>
result will be void also if <span
title="concept-bc-noscript">scripting is disabled</span>.)</p>

</dd>
-->

<dt>Otherwise</dt>

23 index
@@ -67067,24 +67067,31 @@ interface <dfn id=navigatoronline>NavigatorOnLine</dfn> {

</dd>

<dt>If the <code><a href=#document>Document</a></code> object of the element,
<!--(turns out only Firefox does this, and only for <img src=""> and a
few others, so it's commented out for now pending someone having
a convincing use case)

<dt>If the <code>Document</code> object of the element,
attribute, or style sheet from which the <code>javascript:</code>
URL was reached has an associated <a href=#browsing-context>browsing
context</a></dt>
URL was reached has an associated <span>browsing
context</span></dt>

<dd>

<p><a href=#create-an-impotent-script>Create an impotent script</a> using the
<p><span>Create an impotent script</span> using the
aforementioned script source, with the scripting language set to
JavaScript, and with the <code><a href=#document>Document</a></code>'s object's
<a href=#browsing-context>browsing context</a> as the browsing context.</p>
JavaScript, and with the <code>Document</code>'s object's
<span>browsing context</span> as the browsing context.</p>

<p>Let <var title="">result</var> be the return value of the
<i><a href=#initial-code-entry-point>initial code entry-point</a></i> of this <a href=#concept-script title=concept-script>script</a>. If an exception was
<i>initial code entry-point</i> of this <span
title="concept-script">script</span>. If an exception was
raised, let <var title="">result</var> be void instead. (The
result will be void also if <a href=#concept-bc-noscript title=concept-bc-noscript>scripting is disabled</a>.)</p>
result will be void also if <span
title="concept-bc-noscript">scripting is disabled</span>.)</p>

</dd>
-->

<dt>Otherwise</dt>

5 source
@@ -76469,6 +76469,10 @@ interface <dfn>NavigatorOnLine</dfn> {

</dd>

<!--(turns out only Firefox does this, and only for <img src=""> and a
few others, so it's commented out for now pending someone having
a convincing use case)

<dt>If the <code>Document</code> object of the element,
attribute, or style sheet from which the <code>javascript:</code>
URL was reached has an associated <span>browsing
@@ -76489,6 +76493,7 @@ interface <dfn>NavigatorOnLine</dfn> {
title="concept-bc-noscript">scripting is disabled</span>.)</p>

</dd>
-->

<dt>Otherwise</dt>

0 comments on commit 6e71d46

Please sign in to comment.