[html5] r1652 - /

whatwg at whatwg.org whatwg at whatwg.org
Tue May 20 21:32:03 PDT 2008


Author: ianh
Date: 2008-05-20 21:32:02 -0700 (Tue, 20 May 2008)
New Revision: 1652

Modified:
   index
   source
Log:
[e] (0) Uh. Forgot the sandbox attribute... I guess that's the biggest security risk with this... (also, seamless DOM attribute was the wrong type on the interface)

Modified: index
===================================================================
--- index	2008-05-21 03:51:21 UTC (rev 1651)
+++ index	2008-05-21 04:32:02 UTC (rev 1652)
@@ -14193,7 +14193,7 @@
            attribute DOMString <a href="#src2" title=dom-iframe-src>src</a>;
            attribute DOMString <a href="#name2" title=dom-iframe-name>name</a>;
            attribute DOMString <a href="#sandbox0" title=dom-iframe-sandbox>sandbox</a>;
-           attribute DOMString <a href="#seamless1" title=dom-iframe-seamless>seamless</a>;<!--
+           boolean DOMString <a href="#seamless1" title=dom-iframe-seamless>seamless</a>;<!--
   readonly attribute Document <span title="dom-iframe-contentDocument">contentDocument</span>;
   readonly attribute <span>Window</span> <span title="dom-iframe-contentWindow">contentWindow</span>;-->
 };</pre>
@@ -14388,7 +14388,7 @@
     windows it itself embeds).</p>
 
    <pre><p>We're not scared of you! Here is your content, unedited:</p>
-<iframe src="getusercontent.cgi?id=12193"></iframe></pre>
+<iframe sandbox src="getusercontent.cgi?id=12193"></iframe></pre>
 
    <p>Note that cookies are still send to the server in the <code
     title="">getusercontent.cgi</code> request, though they are not visible

Modified: source
===================================================================
--- source	2008-05-21 03:51:21 UTC (rev 1651)
+++ source	2008-05-21 04:32:02 UTC (rev 1652)
@@ -12215,7 +12215,7 @@
            attribute DOMString <span title="dom-iframe-src">src</span>;
            attribute DOMString <span title="dom-iframe-name">name</span>;
            attribute DOMString <span title="dom-iframe-sandbox">sandbox</span>;
-           attribute DOMString <span title="dom-iframe-seamless">seamless</span>;<!--
+           boolean DOMString <span title="dom-iframe-seamless">seamless</span>;<!--
   readonly attribute Document <span title="dom-iframe-contentDocument">contentDocument</span>;
   readonly attribute <span>Window</span> <span title="dom-iframe-contentWindow">contentWindow</span>;-->
 };</pre>
@@ -12432,7 +12432,7 @@
    embeds).</p>
 
    <pre><p>We're not scared of you! Here is your content, unedited:</p>
-<iframe src="getusercontent.cgi?id=12193"></iframe></pre>
+<iframe sandbox src="getusercontent.cgi?id=12193"></iframe></pre>
 
    <p>Note that cookies are still send to the server in the <code
    title="">getusercontent.cgi</code> request, though they are not




More information about the Commit-Watchers mailing list