Fix issue in parser with </select>, <a>-implying-</a>; update securit…

…y section in gen'ed page git-svn-id: http://svn.whatwg.org/webapps@99 340c8d12-0b0e-0410-8428-c7bf67bfef74
whatwg · Aug 3, 2006 · 959c9ff · 959c9ff
1 parent a26edf1
commit 959c9ff
Show file tree

Hide file tree

Showing 2 changed files with 101 additions and 11 deletions.
diff --git a/index b/index
@@ -24,7 +24,7 @@
 
    <h1 id="web-applications">Web Applications 1.0</h1>
 
-   <h2 class="no-num no-toc" id="working">Working Draft &mdash; 31 July 2006</h2>
+   <h2 class="no-num no-toc" id="working">Working Draft &mdash; 3 August 2006</h2>
 
    <p>You can take part in this work. <a
     href="http://www.whatwg.org/mailing-list">Join the working group's
@@ -1677,7 +1677,9 @@ and suggestions on this to the list, btw).
    I can include it. The problem is making it accurate while keeping it
    simple enough that people who don't know what a serialisation of an
    in-memory structure is can still get it. (The relevant section doesn't
-   have to be normative, if that helps.)
+   have to be normative, if that helps.) The sentence "Every XML and HTML
+   document in an HTML UA is represented by a Document object." from section
+   2.3 should seem perfectly reasonable after someone has read this section.
 
   <h2 id="dom"><span class="secno">2. </span>The Document Object Model</h2>
 
@@ -1689,13 +1691,64 @@ and suggestions on this to the list, btw).
 
   <h3 id="the-security"><span class="secno">2.1. </span>The security model
    <span title="WIP"><a href="#wip">[WIP]</a></span></h3>
+  <!-- https://bugzilla.mozilla.org/show_bug.cgi?id=346659 -->
 
   <p><em>Web browser vendors should implement this security model, to provide
    Web authors with a consistent development environment that is
    interoperable across different implementations. However, implementors may
    use any other model if desired.</em>
 
-  <p class="big-issue">This section is <em>so</em> not complete.
+  <p>The security model for Web browsers has grown organically with the
+   development of the Web, and as such is somewhat unique.
+
+  <p>Access to resources and APIs is granted or denied to Web content
+   (scripts, elements, etc) based on the content's <dfn
+   id="origin">origin</dfn>. For historical reasons, the mechanism for
+   determining the <em><a href="#origin">origin</a></em> of a particular
+   piece of content depends on the nature of the content.
+
+  <p>For <code>Document</code>s:
+
+  <dl class="switch">
+   <dt>If it was served over the network using HTTP, HTTPS, FTP, or another
+    protocol whose scheme contains a <em>host authority component</em>:
+
+   <dd>
+    <p>The resource's origin consists of the scheme, host, and port parts of
+     the resource's full URI.</p>
+
+    <p class="example">For example, if a Web page has the address
+     <code>https://www.example.com/demo.html</code>, the origin consists of
+     the tuple "https", "www.example.com", and "443".</p>
+
+   <dt>If it was created by script...
+
+   <dd>
+    <p>The resource's origin consists of the scheme, host, and port parts of
+     the resource's full URI.</p>
+
+    <p class="example">For example, if a Web page has the address
+     <code>https://www.example.com/demo.html</code>, the origin consists of
+     the tuple "https", "www.example.com", and "443".</p>
+
+   <dt>A document resource (a <code>Document</code>) that was served over the
+    network using HTTP, HTTPS, FTP, or another protocol whose scheme contains
+    a <em>host authority component</em>:
+
+   <dd>
+    <p>The resource's origin consists of the scheme, host, and port parts of
+     the resource's full URI.</p>
+
+    <p class="example">For example, if a Web page has the address
+     <code>https://www.example.com/demo.html</code>, the origin consists of
+     the tuple "https", "www.example.com", and "443".</p>
+
+   <dt>If the content was generated by script:
+
+   <dd>The content shares the same origin as the script itself.
+
+   <dt>If the content was generated by
+  </dl>
 
   <p>The <dfn id="domain" title="document's domain">domain of a
    <code>Document</code> object</dfn> is the domain given by the
@@ -1729,6 +1782,8 @@ and suggestions on this to the list, btw).
    the script's domain in IDNA format cannot be obtained. (ToUnicode is
    defined to never fail.)
 
+  <p class="big-issue">This section is <em>so</em> not complete.
+
   <h3 id="common"><span class="secno">2.2. </span>Common DOM interfaces <span
    title="TBW"><a href="#tbw">[TBW]</a></span></h3>
 
@@ -20380,12 +20435,28 @@ another list.
             Safari-only: code dfn kbd nobr samp var wbr
             Both: a b big em font i s small strike strong tt u -->
 
-       <dt>A start tag whose tag name is one of: "a", "b", "big", "em",
-        "font", "i", "nobr", "s", "small", "strike", "strong", "tt", "u"
+       <dt>A start tag whose tag name is "a"
 
        <dd>
-        <p class="big-issue">Need to make &lt;a> close open A elements</p>
+        <p>If the <span><a href="#list-of2">list of active formatting
+         elements</a></span> contains an element whose tag name is "a"
+         between the end of the list and the last marker on the list (or the
+         start of the list if there is no marker on the list), then this is a
+         <span><a href="#parse">parse error</a></span>; act as if an end tag
+         with the tag name "a" had been seen.</p>
+
+        <p><span><a href="#reconstruct">Reconstruct the active formatting
+         elements</a></span>, if any.</p>
+
+        <p><span title="insert an html element"><a href="#insert">Insert an
+         HTML element</a></span> for the token. Add that element to the
+         <span><a href="#list-of2">list of active formatting
+         elements</a></span>.</p>
 
+       <dt>A start tag whose tag name is one of: "b", "big", "em", "font",
+        "i", "nobr", "s", "small", "strike", "strong", "tt", "u"
+
+       <dd>
         <p><span><a href="#reconstruct">Reconstruct the active formatting
          elements</a></span>, if any.</p>
 
@@ -20856,7 +20927,7 @@ another list.
        <dt>An end tag whose tag name is one of: "area", "basefont",
         "bgsound", <!--XXX quirks: remove br-->"br", "embed", "hr", "iframe",
         "image", "img", "input", "isindex", "noembed", "noframes",
-        "noscript", "param", "spacer", "table", "textarea", "wbr"</dt>
+        "noscript", "param", "select", "spacer", "table", "textarea", "wbr"</dt>
        <!-- add keygen if we add the start tag -->
 
        <dd>

diff --git a/source b/source
@@ -752,6 +752,8 @@ and suggestions on this to the list, btw).
 
   <h3>The security model <span title="WIP">[WIP]</span></h3>
 
+<!-- https://bugzilla.mozilla.org/show_bug.cgi?id=346659 -->
+
   <p><em>Web browser vendors should implement this security model, to
   provide Web authors with a consistent development environment that
   is interoperable across different implementations. However,
@@ -18564,13 +18566,30 @@ another list.
             Safari-only: code dfn kbd nobr samp var wbr
             Both: a b big em font i s small strike strong tt u -->
 
-       <dt>A start tag whose tag name is one of: "a", "b", "big", "em",
+       <dt>A start tag whose tag name is "a"</dt>
+       <dd>
+
+        <p>If the <span>list of active formatting elements</span>
+        contains an element whose tag name is "a" between the end of
+        the list and the last marker on the list (or the start of the
+        list if there is no marker on the list), then this is a
+        <span>parse error</span>; act as if an end tag with the tag
+        name "a" had been seen.</p>
+
+        <p><span>Reconstruct the active formatting elements</span>, if
+        any.</p>
+
+        <p><span title="insert an html element">Insert an HTML
+        element</span> for the token. Add that element to the
+        <span>list of active formatting elements</span>.</p>
+
+       </dd>
+
+       <dt>A start tag whose tag name is one of: "b", "big", "em",
        "font", "i", "nobr", "s", "small", "strike", "strong", "tt",
        "u"</dt>
        <dd>
 
- <p class="big-issue">Need to make &lt;a> close open A elements</p>
-
         <p><span>Reconstruct the active formatting elements</span>, if
         any.</p>
 
@@ -19034,7 +19053,7 @@ another list.
        <dt>An end tag whose tag name is one of: "area", "basefont",
        "bgsound", <!--XXX quirks: remove br-->"br", "embed", "hr",
        "iframe", "image", "img", "input", "isindex", "noembed",
-       "noframes", "noscript", "param", "spacer", "table",
+       "noframes", "noscript", "param", "select", "spacer", "table",
        "textarea", "wbr"</dt> <!-- add keygen if we add the start tag -->
        <dd>
         <p><span>Parse error</span>. Ignore the token.</p>