[html5] r4693 - [giow] (0) Make it clear that disabling a feature should truly remove it, not ju [...]
whatwg at whatwg.org
whatwg at whatwg.org
Fri Feb 12 05:09:21 PST 2010
Author: ianh
Date: 2010-02-12 05:09:18 -0800 (Fri, 12 Feb 2010)
New Revision: 4693
Modified:
complete.html
index
source
Log:
[giow] (0) Make it clear that disabling a feature should truly remove it, not just stub it out.
Fixing http://www.w3.org/Bugs/Public/show_bug.cgi?id=8536
Modified: complete.html
===================================================================
--- complete.html 2010-02-12 09:50:27 UTC (rev 4692)
+++ complete.html 2010-02-12 13:09:18 UTC (rev 4693)
@@ -2603,6 +2603,16 @@
</div>
+ <p>When support for a feature is disabled (e.g. as an emergency
+ measure to mitigate a security problem, or to aid in development, or
+ for performance reasons), user agents must act as if they had no
+ support for the feature whatsoever, and as if the feature was not
+ mentioned in this specification. For example, if a particular
+ feature is accessed via an attribute in a Web IDL interface, the
+ attribute itself would be omitted from the objects that implement
+ that interface — leaving the attribute on the object but
+ making it return null or throw an exception is insufficient.</p>
+
<hr><p>When vendor-neutral extensions to this specification are needed,
either this specification can be updated accordingly, or an
extension specification can be written that overrides the
@@ -69222,6 +69232,7 @@
origin</a> is not the <a href=#same-origin>same origin</a> as the
<code>Document</code>'s <a href=#origin>origin</a>, then throw a
<code><a href=#security_err>SECURITY_ERR</a></code> exception and abort these steps.</li>
+ <!-- XXX should do this on getItem()/setItem()/enumerating etc -->
<li><p>If the <code>Document</code>'s <a href=#origin>origin</a> is not a
scheme/host/port tuple, then throw a <code><a href=#security_err>SECURITY_ERR</a></code>
Modified: index
===================================================================
--- index 2010-02-12 09:50:27 UTC (rev 4692)
+++ index 2010-02-12 13:09:18 UTC (rev 4693)
@@ -2502,6 +2502,16 @@
</div>
+ <p>When support for a feature is disabled (e.g. as an emergency
+ measure to mitigate a security problem, or to aid in development, or
+ for performance reasons), user agents must act as if they had no
+ support for the feature whatsoever, and as if the feature was not
+ mentioned in this specification. For example, if a particular
+ feature is accessed via an attribute in a Web IDL interface, the
+ attribute itself would be omitted from the objects that implement
+ that interface — leaving the attribute on the object but
+ making it return null or throw an exception is insufficient.</p>
+
<hr><p>When vendor-neutral extensions to this specification are needed,
either this specification can be updated accordingly, or an
extension specification can be written that overrides the
Modified: source
===================================================================
--- source 2010-02-12 09:50:27 UTC (rev 4692)
+++ source 2010-02-12 13:09:18 UTC (rev 4693)
@@ -1519,6 +1519,16 @@
</div>
+ <p>When support for a feature is disabled (e.g. as an emergency
+ measure to mitigate a security problem, or to aid in development, or
+ for performance reasons), user agents must act as if they had no
+ support for the feature whatsoever, and as if the feature was not
+ mentioned in this specification. For example, if a particular
+ feature is accessed via an attribute in a Web IDL interface, the
+ attribute itself would be omitted from the objects that implement
+ that interface — leaving the attribute on the object but
+ making it return null or throw an exception is insufficient.</p>
+
<hr>
<p>When vendor-neutral extensions to this specification are needed,
@@ -77885,6 +77895,7 @@
origin</span> is not the <span>same origin</span> as the
<code>Document</code>'s <span>origin</span>, then throw a
<code>SECURITY_ERR</code> exception and abort these steps.</p></li>
+ <!-- XXX should do this on getItem()/setItem()/enumerating etc -->
<li><p>If the <code>Document</code>'s <span>origin</span> is not a
scheme/host/port tuple, then throw a <code>SECURITY_ERR</code>
More information about the Commit-Watchers
mailing list