[html5] r1896 - [] (0) Make the handling of websocket-origin stricter

[whatwg at whatwg.org]

Author: ianh
Date: 2008-07-21 18:21:47 -0700 (Mon, 21 Jul 2008)
New Revision: 1896

Modified:
   index
   source
Log:
[] (0) Make the handling of websocket-origin stricter

Modified: index
===================================================================
--- index	2008-07-22 01:12:59 UTC (rev 1895)
+++ index	2008-07-22 01:21:47 UTC (rev 1896)
@@ -42073,12 +42073,12 @@
     <dl class=switch>
      <dt>If the entry's name is "<code title="">websocket-origin</code>"
 
-     <dd>Assume the value is a <a href="#url">URL</a>. If the value does not
-      have the <a href="#same-origin">same origin</a> as the script that
-      invoked the <code title=dom-WebSocket><a
-      href="#websocket1">WebSocket()</a></code> constructor, then <a
-      href="#fail-the">fail the Web Socket connection</a> and abort these
-      steps.
+     <dd>If the value is not exactly equal to the <a href="#ascii"
+      title="ASCII serialization of an origin">ASCII serialization</a> of the
+      <a href="#origin0">origin</a> of the script that invoked the <code
+      title=dom-WebSocket><a href="#websocket1">WebSocket()</a></code>
+      constructor, then <a href="#fail-the">fail the Web Socket
+      connection</a> and abort these steps.
 
      <dt>If the entry's name is "<code title="">websocket-location</code>"
 

Modified: source
===================================================================
--- source	2008-07-22 01:12:59 UTC (rev 1895)
+++ source	2008-07-22 01:21:47 UTC (rev 1896)
@@ -39637,9 +39637,10 @@
      <dt>If the entry's name is "<code
      title="">websocket-origin</code>"</dt>
 
-     <dd>Assume the value is a <span>URL</span>. If the value does not
-     have the <span>same origin</span> as the script that invoked the
-     <code title="dom-WebSocket">WebSocket()</code> constructor, then
+     <dd>If the value is not exactly equal to the <span title="ASCII
+     serialization of an origin">ASCII serialization</span> of the
+     <span>origin</span> of the script that invoked the <code
+     title="dom-WebSocket">WebSocket()</code> constructor, then
      <span>fail the Web Socket connection</span> and abort these
      steps.</dd>