[html5] r6251 - [giow] (1) appcache: only allow text/cache-manifest with no parameters or with a [...]

whatwg at whatwg.org whatwg at whatwg.org
Thu Jun 16 17:41:26 PDT 2011


Author: ianh
Date: 2011-06-16 17:41:25 -0700 (Thu, 16 Jun 2011)
New Revision: 6251

Modified:
   complete.html
   index
   source
Log:
[giow] (1) appcache: only allow text/cache-manifest with no parameters or with a charset=utf-8 parameter.

Modified: complete.html
===================================================================
--- complete.html	2011-06-16 23:07:53 UTC (rev 6250)
+++ complete.html	2011-06-17 00:41:25 UTC (rev 6251)
@@ -239,7 +239,7 @@
 
   <header class=head id=head><p><a class=logo href=http://www.whatwg.org/><img alt=WHATWG height=101 src=/images/logo width=101></a></p>
    <hgroup><h1>Web Applications 1.0</h1>
-    <h2 class="no-num no-toc">Living Standard — Last Updated 16 June 2011</h2>
+    <h2 class="no-num no-toc">Living Standard — Last Updated 17 June 2011</h2>
    </hgroup><dl><dt>Multiple-page version:</dt>
     <dd><a href=http://www.whatwg.org/specs/web-apps/current-work/complete/>http://www.whatwg.org/specs/web-apps/current-work/complete/</a></dd>
     <dt>One-page version:</dt>
@@ -66170,11 +66170,12 @@
     doesn't matter, since this can never be cross-origin -->
 
     <p>If the resource is labeled with the <a href=#mime-type>MIME type</a>
-    <code><a href=#text/cache-manifest>text/cache-manifest</a></code>, parse <var title="">manifest</var> according to the <a href=#parse-a-manifest title="parse a
-    manifest">rules for parsing manifests</a>, obtaining a list of
-    <a href=#concept-appcache-explicit title=concept-appcache-explicit>explicit entries</a>,
-    <a href=#concept-appcache-fallback title=concept-appcache-fallback>fallback entries</a>
-    and the <a href=#concept-appcache-fallback-ns title=concept-appcache-fallback-ns>fallback
+    <code><a href=#text/cache-manifest>text/cache-manifest</a></code>, either with no parameters or
+    with a single parameter with the name "<code title="">charset</code>" whose value is an <a href=#ascii-case-insensitive>ASCII
+    case-insensitive</a> match for the string "<code title="">utf-8</code>", parse <var title="">manifest</var>
+    according to the <a href=#parse-a-manifest title="parse a manifest">rules for parsing
+    manifests</a>, obtaining a list of <a href=#concept-appcache-explicit title=concept-appcache-explicit>explicit entries</a>, <a href=#concept-appcache-fallback title=concept-appcache-fallback>fallback entries</a> and the
+    <a href=#concept-appcache-fallback-ns title=concept-appcache-fallback-ns>fallback
     namespaces</a> that map to them, entries for the <a href=#concept-appcache-onlinewhitelist title=concept-appcache-onlinewhitelist>online whitelist</a>,
     and a value for the <a href=#concept-appcache-onlinewhitelist-wildcard title=concept-appcache-onlinewhitelist-wildcard>online whitelist
     wildcard flag</a>.</p>
@@ -66243,8 +66244,9 @@
     cancels the download, or the parser for manifests fails when
     checking the magic signature), or if the server returned a
     redirect, or if the resource is labeled with a <a href=#mime-type>MIME
-    type</a> other than <code><a href=#text/cache-manifest>text/cache-manifest</a></code>, then run
-    the <a href=#cache-failure-steps>cache failure steps</a>. <a href=#refsHTTP>[HTTP]</a></p>
+    type</a> other than <code><a href=#text/cache-manifest>text/cache-manifest</a></code> or has
+    parameters that do not match the conditions listed earlier, then
+    run the <a href=#cache-failure-steps>cache failure steps</a>. <a href=#refsHTTP>[HTTP]</a></p>
 
    </li>
 
@@ -78953,10 +78955,8 @@
 
   <p>HTTP 200 OK responses with a <a href=#content-type>Content-Type</a> header
   specifying the type <code><a href=#text/event-stream>text/event-stream</a></code>, either with no
-  parameters or with a single parameter whose name is "<code title="">charset</code>" and whose value is an <span>ASCII
-  case-insensitive match</span> for "UTF-8", must be processed line by
-  line <a href=#event-stream-interpretation>as described
-  below</a>.</p>
+  parameters or with a single parameter with the name "<code title="">charset</code>" whose value is an <a href=#ascii-case-insensitive>ASCII
+  case-insensitive</a> match for the string "<code title="">utf-8</code>", must be processed line by line <a href=#event-stream-interpretation>as described below</a>.</p>
 
   <p>When a successful response with a supported <a href=#mime-type>MIME
   type</a> is received, such that the user agent begins parsing the

Modified: index
===================================================================
--- index	2011-06-16 23:07:53 UTC (rev 6250)
+++ index	2011-06-17 00:41:25 UTC (rev 6251)
@@ -243,7 +243,7 @@
 
   <header class=head id=head><p><a class=logo href=http://www.whatwg.org/><img alt=WHATWG height=101 src=/images/logo width=101></a></p>
    <hgroup><h1 class=allcaps>HTML</h1>
-    <h2 class="no-num no-toc">Living Standard — Last Updated 16 June 2011</h2>
+    <h2 class="no-num no-toc">Living Standard — Last Updated 17 June 2011</h2>
    </hgroup><dl><dt><strong>Web developer edition</strong></dt>
     <dd><strong><a href=http://developers.whatwg.org/>http://developers.whatwg.org/</a></strong></dd>
     <dt>Multiple-page version:</dt>
@@ -66051,11 +66051,12 @@
     doesn't matter, since this can never be cross-origin -->
 
     <p>If the resource is labeled with the <a href=#mime-type>MIME type</a>
-    <code><a href=#text/cache-manifest>text/cache-manifest</a></code>, parse <var title="">manifest</var> according to the <a href=#parse-a-manifest title="parse a
-    manifest">rules for parsing manifests</a>, obtaining a list of
-    <a href=#concept-appcache-explicit title=concept-appcache-explicit>explicit entries</a>,
-    <a href=#concept-appcache-fallback title=concept-appcache-fallback>fallback entries</a>
-    and the <a href=#concept-appcache-fallback-ns title=concept-appcache-fallback-ns>fallback
+    <code><a href=#text/cache-manifest>text/cache-manifest</a></code>, either with no parameters or
+    with a single parameter with the name "<code title="">charset</code>" whose value is an <a href=#ascii-case-insensitive>ASCII
+    case-insensitive</a> match for the string "<code title="">utf-8</code>", parse <var title="">manifest</var>
+    according to the <a href=#parse-a-manifest title="parse a manifest">rules for parsing
+    manifests</a>, obtaining a list of <a href=#concept-appcache-explicit title=concept-appcache-explicit>explicit entries</a>, <a href=#concept-appcache-fallback title=concept-appcache-fallback>fallback entries</a> and the
+    <a href=#concept-appcache-fallback-ns title=concept-appcache-fallback-ns>fallback
     namespaces</a> that map to them, entries for the <a href=#concept-appcache-onlinewhitelist title=concept-appcache-onlinewhitelist>online whitelist</a>,
     and a value for the <a href=#concept-appcache-onlinewhitelist-wildcard title=concept-appcache-onlinewhitelist-wildcard>online whitelist
     wildcard flag</a>.</p>
@@ -66124,8 +66125,9 @@
     cancels the download, or the parser for manifests fails when
     checking the magic signature), or if the server returned a
     redirect, or if the resource is labeled with a <a href=#mime-type>MIME
-    type</a> other than <code><a href=#text/cache-manifest>text/cache-manifest</a></code>, then run
-    the <a href=#cache-failure-steps>cache failure steps</a>. <a href=#refsHTTP>[HTTP]</a></p>
+    type</a> other than <code><a href=#text/cache-manifest>text/cache-manifest</a></code> or has
+    parameters that do not match the conditions listed earlier, then
+    run the <a href=#cache-failure-steps>cache failure steps</a>. <a href=#refsHTTP>[HTTP]</a></p>
 
    </li>
 

Modified: source
===================================================================
--- source	2011-06-16 23:07:53 UTC (rev 6250)
+++ source	2011-06-17 00:41:25 UTC (rev 6251)
@@ -75305,12 +75305,16 @@
     doesn't matter, since this can never be cross-origin -->
 
     <p>If the resource is labeled with the <span>MIME type</span>
-    <code>text/cache-manifest</code>, parse <var
-    title="">manifest</var> according to the <span title="parse a
-    manifest">rules for parsing manifests</span>, obtaining a list of
-    <span title="concept-appcache-explicit">explicit entries</span>,
-    <span title="concept-appcache-fallback">fallback entries</span>
-    and the <span title="concept-appcache-fallback-ns">fallback
+    <code>text/cache-manifest</code>, either with no parameters or
+    with a single parameter with the name "<code
+    title="">charset</code>" whose value is an <span>ASCII
+    case-insensitive</span> match for the string "<code
+    title="">utf-8</code>", parse <var title="">manifest</var>
+    according to the <span title="parse a manifest">rules for parsing
+    manifests</span>, obtaining a list of <span
+    title="concept-appcache-explicit">explicit entries</span>, <span
+    title="concept-appcache-fallback">fallback entries</span> and the
+    <span title="concept-appcache-fallback-ns">fallback
     namespaces</span> that map to them, entries for the <span
     title="concept-appcache-onlinewhitelist">online whitelist</span>,
     and a value for the <span
@@ -75396,8 +75400,9 @@
     cancels the download, or the parser for manifests fails when
     checking the magic signature), or if the server returned a
     redirect, or if the resource is labeled with a <span>MIME
-    type</span> other than <code>text/cache-manifest</code>, then run
-    the <span>cache failure steps</span>. <a
+    type</span> other than <code>text/cache-manifest</code> or has
+    parameters that do not match the conditions listed earlier, then
+    run the <span>cache failure steps</span>. <a
     href="#refsHTTP">[HTTP]</a></p>
 
    </li>
@@ -89501,11 +89506,11 @@
 
   <p>HTTP 200 OK responses with a <span>Content-Type</span> header
   specifying the type <code>text/event-stream</code>, either with no
-  parameters or with a single parameter whose name is "<code
-  title="">charset</code>" and whose value is an <span>ASCII
-  case-insensitive match</span> for "UTF-8", must be processed line by
-  line <a href="#event-stream-interpretation">as described
-  below</a>.</p>
+  parameters or with a single parameter with the name "<code
+  title="">charset</code>" whose value is an <span>ASCII
+  case-insensitive</span> match for the string "<code
+  title="">utf-8</code>", must be processed line by line <a
+  href="#event-stream-interpretation">as described below</a>.</p>
 
   <p>When a successful response with a supported <span>MIME
   type</span> is received, such that the user agent begins parsing the




More information about the Commit-Watchers mailing list