Skip to content
Permalink
Browse files

[giow] (2) Fix the rules on what 'Origin' header to use when navigati…

…ng to a resource in an <iframe>, <object>, <embed>, or <frame> element, so that the latter two are not forgotten.

Fixing https://www.w3.org/Bugs/Public/show_bug.cgi?id=23837
Affected topics: HTML

git-svn-id: http://svn.whatwg.org/webapps@8307 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information...
Hixie committed Nov 22, 2013
1 parent 5527e04 commit ab149885517eddfbe0dea10c467adc144b78cf35
Showing with 14 additions and 12 deletions.
  1. +5 −4 complete.html
  2. +5 −4 index
  3. +4 −4 source

<header class=head id=head><p><a href=http://www.whatwg.org/ class=logo><img width=101 src=/images/logo alt=WHATWG height=101></a></p>
<hgroup><h1 class=allcaps>HTML</h1>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 21 November 2013</h2>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 22 November 2013</h2>
</hgroup><dl><dt><strong>Web developer edition:</strong></dt>
<dd><strong><a href=http://developers.whatwg.org/>http://developers.whatwg.org/</a></strong></dd>
<dt>Multiple-page version:</dt>
potentially http-origin privacy sensitive -->

<p>Otherwise, if the <a href=#browsing-context>browsing context</a> being navigated is a <a href=#child-browsing-context>child browsing
context</a> for an <code><a href=#the-iframe-element>iframe</a></code> or <code><a href=#the-object-element>object</a></code> element, then the <a href=#fetch title=fetch>fetching algorithm</a> must be invoked from the <code><a href=#the-iframe-element>iframe</a></code> or
<code><a href=#the-object-element>object</a></code> element's <a href=#browsing-context-scope-origin>browsing context scope origin</a>, if it has one.</p>
<!-- potentially http-origin privacy sensitive -->
context</a>, then the <a href=#fetch title=fetch>fetching algorithm</a> must be invoked from the
<a href=#browsing-context-scope-origin>browsing context scope origin</a> of the <a href=#browsing-context-container>browsing context container</a> of the
<a href=#browsing-context>browsing context</a> being navigated, if it has one.</p> <!-- potentially http-origin
privacy sensitive -->

</li>

9 index

<header class=head id=head><p><a href=http://www.whatwg.org/ class=logo><img width=101 src=/images/logo alt=WHATWG height=101></a></p>
<hgroup><h1 class=allcaps>HTML</h1>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 21 November 2013</h2>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 22 November 2013</h2>
</hgroup><dl><dt><strong>Web developer edition:</strong></dt>
<dd><strong><a href=http://developers.whatwg.org/>http://developers.whatwg.org/</a></strong></dd>
<dt>Multiple-page version:</dt>
potentially http-origin privacy sensitive -->

<p>Otherwise, if the <a href=#browsing-context>browsing context</a> being navigated is a <a href=#child-browsing-context>child browsing
context</a> for an <code><a href=#the-iframe-element>iframe</a></code> or <code><a href=#the-object-element>object</a></code> element, then the <a href=#fetch title=fetch>fetching algorithm</a> must be invoked from the <code><a href=#the-iframe-element>iframe</a></code> or
<code><a href=#the-object-element>object</a></code> element's <a href=#browsing-context-scope-origin>browsing context scope origin</a>, if it has one.</p>
<!-- potentially http-origin privacy sensitive -->
context</a>, then the <a href=#fetch title=fetch>fetching algorithm</a> must be invoked from the
<a href=#browsing-context-scope-origin>browsing context scope origin</a> of the <a href=#browsing-context-container>browsing context container</a> of the
<a href=#browsing-context>browsing context</a> being navigated, if it has one.</p> <!-- potentially http-origin
privacy sensitive -->

</li>

8 source
potentially http-origin privacy sensitive -->

<p>Otherwise, if the <span>browsing context</span> being navigated is a <span>child browsing
context</span> for an <code>iframe</code> or <code>object</code> element, then the <span
data-x="fetch">fetching algorithm</span> must be invoked from the <code>iframe</code> or
<code>object</code> element's <span>browsing context scope origin</span>, if it has one.</p>
<!-- potentially http-origin privacy sensitive -->
context</span>, then the <span data-x="fetch">fetching algorithm</span> must be invoked from the
<span>browsing context scope origin</span> of the <span>browsing context container</span> of the
<span>browsing context</span> being navigated, if it has one.</p> <!-- potentially http-origin
privacy sensitive -->

</li>

0 comments on commit ab14988

Please sign in to comment.
You can’t perform that action at this time.