Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

javascript: URL should not be able to be base URLs #124

Closed
zcorpan opened this issue May 26, 2016 · 1 comment
Closed

javascript: URL should not be able to be base URLs #124

zcorpan opened this issue May 26, 2016 · 1 comment

Comments

@zcorpan
Copy link
Member

zcorpan commented May 26, 2016

From whatwg/html#672

In the scheme state, when seeing :, maybe we should check the scheme and set the cannot-be-a-base-URL flag if it's javascript (or data, or mailto, or some other known schemes that are bogus as base URLs).

@annevk
Copy link
Member

annevk commented May 26, 2016

I'm not sure if we should require that at this level. I think it's nicer if URLs remain as generic as possible. It would be more reasonable to prohibit them in <base>, although also there I'm not sure we have sufficient reason to.

@annevk annevk closed this as completed Oct 28, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

2 participants