[html5] r4105 - [] (0) Prevent onunload hijacks.

[whatwg at whatwg.org]

Author: ianh
Date: 2009-10-11 18:04:09 -0700 (Sun, 11 Oct 2009)
New Revision: 4105

Modified:
   complete.html
   index
   source
Log:
[] (0) Prevent onunload hijacks.

Modified: complete.html
===================================================================
--- complete.html	2009-10-11 08:57:12 UTC (rev 4104)
+++ complete.html	2009-10-12 01:04:09 UTC (rev 4105)
@@ -110,7 +110,7 @@
 
   <header class=head><p><a class=logo href=http://www.whatwg.org/ rel=home><img alt=WHATWG src=/images/logo></a></p>
    <hgroup><h1>Web Applications 1.0</h1>
-    <h2 class="no-num no-toc">Draft Standard — 11 October 2009</h2>
+    <h2 class="no-num no-toc">Draft Standard — 12 October 2009</h2>
    </hgroup><p>You can take part in this work. <a href=http://www.whatwg.org/mailing-list>Join the working group's discussion list.</a></p>
    <p><strong>Web designers!</strong> We have a <a href=http://blog.whatwg.org/faq/>FAQ</a>, a <a href=http://forums.whatwg.org/>forum</a>, and a <a href=http://www.whatwg.org/mailing-list#help>help mailing list</a> for you!</p>
    <!--<p class="impl"><strong>Implementors!</strong> We have a <a href="http://www.whatwg.org/mailing-list#implementors">mailing list</a> for you too!</p>-->
@@ -55082,6 +55082,19 @@
    instead.</li>
 
    <li><p>If there is a preexisting attempt to navigate the
+   <a href=#browsing-context>browsing context</a>, and the <a href=#source-browsing-context>source browsing
+   context</a> is the same as the <a href=#browsing-context>browsing context</a>
+   being navigated, and that attempt is currently
+   running the <a href=#unload-a-document>unload a document</a> algorithm, and the
+   <a href=#origin>origin</a> of the <a href=#url>URL</a> of the resource being
+   loaded in that navigation is not the <a href=#same-origin>same origin</a> as
+   the <a href=#origin>origin</a> of the <a href=#url>URL</a> of the resource
+   being loaded in <em>this</em> navigation, then abort these steps
+   without affecting the preexisting attempt to navigate the
+   <a href=#browsing-context>browsing context</a>.</li>
+   <!-- http://www.hixie.ch/tests/adhoc/html/navigation/unload/ -->
+
+   <li><p>If there is a preexisting attempt to navigate the
    <a href=#browsing-context>browsing context</a>, and either that attempt has not yet
    <a href=#concept-navigate-mature title=concept-navigate-mature>matured</a> (i.e. it has
    not passed the point of making its <code>Document</code> the

Modified: index
===================================================================
--- index	2009-10-11 08:57:12 UTC (rev 4104)
+++ index	2009-10-12 01:04:09 UTC (rev 4105)
@@ -111,7 +111,7 @@
 
   <header class=head><p><a class=logo href=http://www.whatwg.org/ rel=home><img alt=WHATWG src=/images/logo></a></p>
    <hgroup><h1>HTML5</h1>
-    <h2 class="no-num no-toc">Draft Standard — 11 October 2009</h2>
+    <h2 class="no-num no-toc">Draft Standard — 12 October 2009</h2>
    </hgroup><p>You can take part in this work. <a href=http://www.whatwg.org/mailing-list>Join the working group's discussion list.</a></p>
    <p><strong>Web designers!</strong> We have a <a href=http://blog.whatwg.org/faq/>FAQ</a>, a <a href=http://forums.whatwg.org/>forum</a>, and a <a href=http://www.whatwg.org/mailing-list#help>help mailing list</a> for you!</p>
    <!--<p class="impl"><strong>Implementors!</strong> We have a <a href="http://www.whatwg.org/mailing-list#implementors">mailing list</a> for you too!</p>-->
@@ -52248,6 +52248,19 @@
    instead.</li>
 
    <li><p>If there is a preexisting attempt to navigate the
+   <a href=#browsing-context>browsing context</a>, and the <a href=#source-browsing-context>source browsing
+   context</a> is the same as the <a href=#browsing-context>browsing context</a>
+   being navigated, and that attempt is currently
+   running the <a href=#unload-a-document>unload a document</a> algorithm, and the
+   <a href=#origin>origin</a> of the <a href=#url>URL</a> of the resource being
+   loaded in that navigation is not the <a href=#same-origin>same origin</a> as
+   the <a href=#origin>origin</a> of the <a href=#url>URL</a> of the resource
+   being loaded in <em>this</em> navigation, then abort these steps
+   without affecting the preexisting attempt to navigate the
+   <a href=#browsing-context>browsing context</a>.</li>
+   <!-- http://www.hixie.ch/tests/adhoc/html/navigation/unload/ -->
+
+   <li><p>If there is a preexisting attempt to navigate the
    <a href=#browsing-context>browsing context</a>, and either that attempt has not yet
    <a href=#concept-navigate-mature title=concept-navigate-mature>matured</a> (i.e. it has
    not passed the point of making its <code>Document</code> the

Modified: source
===================================================================
--- source	2009-10-11 08:57:12 UTC (rev 4104)
+++ source	2009-10-12 01:04:09 UTC (rev 4105)
@@ -62204,6 +62204,19 @@
    instead.</p></li>
 
    <li><p>If there is a preexisting attempt to navigate the
+   <span>browsing context</span>, and the <span>source browsing
+   context</span> is the same as the <span>browsing context</span>
+   being navigated, and that attempt is currently
+   running the <span>unload a document</span> algorithm, and the
+   <span>origin</span> of the <span>URL</span> of the resource being
+   loaded in that navigation is not the <span>same origin</span> as
+   the <span>origin</span> of the <span>URL</span> of the resource
+   being loaded in <em>this</em> navigation, then abort these steps
+   without affecting the preexisting attempt to navigate the
+   <span>browsing context</span>.</p></li>
+   <!-- http://www.hixie.ch/tests/adhoc/html/navigation/unload/ -->
+
+   <li><p>If there is a preexisting attempt to navigate the
    <span>browsing context</span>, and either that attempt has not yet
    <span title="concept-navigate-mature">matured</span> (i.e. it has
    not passed the point of making its <code>Document</code> the