[html5] r6139 - [giow] (0) Drop javascript: support from <img src>, <object data>, CSS, etc, etc [...]

[whatwg at whatwg.org]

Author: ianh
Date: 2011-05-13 15:34:19 -0700 (Fri, 13 May 2011)
New Revision: 6139

Modified:
   complete.html
   index
   source
Log:
[giow] (0) Drop javascript: support from <img src>, <object data>, CSS, etc, etc, etc.

Modified: complete.html
===================================================================
--- complete.html	2011-05-13 21:02:50 UTC (rev 6138)
+++ complete.html	2011-05-13 22:34:19 UTC (rev 6139)
@@ -67027,24 +67027,31 @@
 
      </dd>
 
-     <dt>If the <code><a href=#document>Document</a></code> object of the element,
+<!--(turns out only Firefox does this, and only for <img src=""> and a
+     few others, so it's commented out for now pending someone having
+     a convincing use case)
+
+     <dt>If the <code>Document</code> object of the element,
      attribute, or style sheet from which the <code>javascript:</code>
-     URL was reached has an associated <a href=#browsing-context>browsing
-     context</a></dt>
+     URL was reached has an associated <span>browsing
+     context</span></dt>
 
      <dd>
 
-      <p><a href=#create-an-impotent-script>Create an impotent script</a> using the
+      <p><span>Create an impotent script</span> using the
       aforementioned script source, with the scripting language set to
-      JavaScript, and with the <code><a href=#document>Document</a></code>'s object's
-      <a href=#browsing-context>browsing context</a> as the browsing context.</p>
+      JavaScript, and with the <code>Document</code>'s object's
+      <span>browsing context</span> as the browsing context.</p>
 
       <p>Let <var title="">result</var> be the return value of the
-      <i><a href=#initial-code-entry-point>initial code entry-point</a></i> of this <a href=#concept-script title=concept-script>script</a>. If an exception was
+      <i>initial code entry-point</i> of this <span
+      title="concept-script">script</span>. If an exception was
       raised, let <var title="">result</var> be void instead. (The
-      result will be void also if <a href=#concept-bc-noscript title=concept-bc-noscript>scripting is disabled</a>.)</p>
+      result will be void also if <span
+      title="concept-bc-noscript">scripting is disabled</span>.)</p>
 
      </dd>
+-->
 
      <dt>Otherwise</dt>
 

Modified: index
===================================================================
--- index	2011-05-13 21:02:50 UTC (rev 6138)
+++ index	2011-05-13 22:34:19 UTC (rev 6139)
@@ -67067,24 +67067,31 @@
 
      </dd>
 
-     <dt>If the <code><a href=#document>Document</a></code> object of the element,
+<!--(turns out only Firefox does this, and only for <img src=""> and a
+     few others, so it's commented out for now pending someone having
+     a convincing use case)
+
+     <dt>If the <code>Document</code> object of the element,
      attribute, or style sheet from which the <code>javascript:</code>
-     URL was reached has an associated <a href=#browsing-context>browsing
-     context</a></dt>
+     URL was reached has an associated <span>browsing
+     context</span></dt>
 
      <dd>
 
-      <p><a href=#create-an-impotent-script>Create an impotent script</a> using the
+      <p><span>Create an impotent script</span> using the
       aforementioned script source, with the scripting language set to
-      JavaScript, and with the <code><a href=#document>Document</a></code>'s object's
-      <a href=#browsing-context>browsing context</a> as the browsing context.</p>
+      JavaScript, and with the <code>Document</code>'s object's
+      <span>browsing context</span> as the browsing context.</p>
 
       <p>Let <var title="">result</var> be the return value of the
-      <i><a href=#initial-code-entry-point>initial code entry-point</a></i> of this <a href=#concept-script title=concept-script>script</a>. If an exception was
+      <i>initial code entry-point</i> of this <span
+      title="concept-script">script</span>. If an exception was
       raised, let <var title="">result</var> be void instead. (The
-      result will be void also if <a href=#concept-bc-noscript title=concept-bc-noscript>scripting is disabled</a>.)</p>
+      result will be void also if <span
+      title="concept-bc-noscript">scripting is disabled</span>.)</p>
 
      </dd>
+-->
 
      <dt>Otherwise</dt>
 

Modified: source
===================================================================
--- source	2011-05-13 21:02:50 UTC (rev 6138)
+++ source	2011-05-13 22:34:19 UTC (rev 6139)
@@ -76469,6 +76469,10 @@
 
      </dd>
 
+<!--(turns out only Firefox does this, and only for <img src=""> and a
+     few others, so it's commented out for now pending someone having
+     a convincing use case)
+
      <dt>If the <code>Document</code> object of the element,
      attribute, or style sheet from which the <code>javascript:</code>
      URL was reached has an associated <span>browsing
@@ -76489,6 +76493,7 @@
       title="concept-bc-noscript">scripting is disabled</span>.)</p>
 
      </dd>
+-->
 
      <dt>Otherwise</dt>