[html5] r7140 - [e] (0) move the definition of 'script' for origins down a bit. Affected topics: [...]
whatwg at whatwg.org
whatwg at whatwg.org
Fri Jun 22 14:53:56 PDT 2012
Author: ianh
Date: 2012-06-22 14:53:55 -0700 (Fri, 22 Jun 2012)
New Revision: 7140
Modified:
complete.html
index
source
Log:
[e] (0) move the definition of 'script' for origins down a bit.
Affected topics: Security
Modified: complete.html
===================================================================
--- complete.html 2012-06-22 20:54:07 UTC (rev 7139)
+++ complete.html 2012-06-22 21:53:55 UTC (rev 7140)
@@ -66068,84 +66068,6 @@
</dd>
- <dt>For scripts</dt>
-
- <dd>
-
- <p>The <a href=#origin>origin</a> and <a href=#effective-script-origin>effective script
- origin</a> of a script are determined from another resource,
- called the <i>owner</i>:</p>
-
- <dl class=switch><dt>If a script is in a <code><a href=#the-script-element>script</a></code> element</dt>
-
- <dd>The owner is the <code><a href=#document>Document</a></code> to which the
- <code><a href=#the-script-element>script</a></code> element belongs.</dd>
-
-
- <dt>If a script is in an <a href=#event-handler-content-attributes title="event handler content
- attributes">event handler content attribute</a></dt>
-
- <dd>The owner is the <code><a href=#document>Document</a></code> to which the
- attribute node belongs.</dd>
-
-
- <dt>If a script is a function or other code reference created by
- another script</dt>
-
- <dd>The owner is the script that created it.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> that was returned as the
- location of an HTTP redirect (<a href=#concept-http-equivalent-codes title=concept-http-equivalent-codes>or equivalent</a> in
- other protocols)</dt>
-
- <dd>The owner is the <a href=#url>URL</a> that redirected to the
- <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a>.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in an attribute</dt>
-
- <dd>The owner is the <code><a href=#document>Document</a></code> of the element on
- which the attribute is found.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in a style sheet</dt>
-
- <dd>The owner is the <a href=#url>URL</a> of the style sheet.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
- context</a> is being <a href=#navigate title=navigate>navigated</a>,
- the URL having been provided by the user (e.g. by using a
- <i>bookmarklet</i>)</dt>
-
- <dd>The owner is the <code><a href=#document>Document</a></code> of the <a href=#browsing-context>browsing
- context</a>'s <a href=#active-document>active document</a>.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
- context</a> is being <a href=#navigate title=navigate>navigated</a>,
- the URL having been declared in markup</dt>
-
- <dd>The owner is the <code><a href=#document>Document</a></code> of the element
- (e.g. an <code><a href=#the-a-element>a</a></code> or <code><a href=#the-area-element>area</a></code> element) that
- declared the URL.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
- context</a> is being <a href=#navigate title=navigate>navigated</a>,
- the URL having been provided by script</dt>
-
- <dd>The owner is the script that provided the URL.</dd>
-
- </dl><p>The <a href=#origin>origin</a> of the script is then equal to the
- <a href=#origin>origin</a> of the owner, and the <a href=#effective-script-origin>effective script
- origin</a> of the script is equal to the <a href=#effective-script-origin>effective script
- origin</a> of the owner.</p>
-
- </dd>
-
-
<dt>For <code><a href=#document>Document</a></code> objects</dt>
<dd>
@@ -66284,6 +66206,84 @@
</dd>
+
+ <dt>For scripts</dt>
+
+ <dd>
+
+ <p>The <a href=#origin>origin</a> and <a href=#effective-script-origin>effective script
+ origin</a> of a script are determined from another resource,
+ called the <i>owner</i>:</p>
+
+ <dl class=switch><dt>If a script is in a <code><a href=#the-script-element>script</a></code> element</dt>
+
+ <dd>The owner is the <code><a href=#document>Document</a></code> to which the
+ <code><a href=#the-script-element>script</a></code> element belongs.</dd>
+
+
+ <dt>If a script is in an <a href=#event-handler-content-attributes title="event handler content
+ attributes">event handler content attribute</a></dt>
+
+ <dd>The owner is the <code><a href=#document>Document</a></code> to which the
+ attribute node belongs.</dd>
+
+
+ <dt>If a script is a function or other code reference created by
+ another script</dt>
+
+ <dd>The owner is the script that created it.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> that was returned as the
+ location of an HTTP redirect (<a href=#concept-http-equivalent-codes title=concept-http-equivalent-codes>or equivalent</a> in
+ other protocols)</dt>
+
+ <dd>The owner is the <a href=#url>URL</a> that redirected to the
+ <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a>.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in an attribute</dt>
+
+ <dd>The owner is the <code><a href=#document>Document</a></code> of the element on
+ which the attribute is found.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in a style sheet</dt>
+
+ <dd>The owner is the <a href=#url>URL</a> of the style sheet.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+ context</a> is being <a href=#navigate title=navigate>navigated</a>,
+ the URL having been provided by the user (e.g. by using a
+ <i>bookmarklet</i>)</dt>
+
+ <dd>The owner is the <code><a href=#document>Document</a></code> of the <a href=#browsing-context>browsing
+ context</a>'s <a href=#active-document>active document</a>.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+ context</a> is being <a href=#navigate title=navigate>navigated</a>,
+ the URL having been declared in markup</dt>
+
+ <dd>The owner is the <code><a href=#document>Document</a></code> of the element
+ (e.g. an <code><a href=#the-a-element>a</a></code> or <code><a href=#the-area-element>area</a></code> element) that
+ declared the URL.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+ context</a> is being <a href=#navigate title=navigate>navigated</a>,
+ the URL having been provided by script</dt>
+
+ <dd>The owner is the script that provided the URL.</dd>
+
+ </dl><p>The <a href=#origin>origin</a> of the script is then equal to the
+ <a href=#origin>origin</a> of the owner, and the <a href=#effective-script-origin>effective script
+ origin</a> of the script is equal to the <a href=#effective-script-origin>effective script
+ origin</a> of the owner.</p>
+
+ </dd>
+
</dl><p>Other specifications can override the above definitions by
themselves specifying the origin of a particular URL, script,
<code><a href=#document>Document</a></code>, or image.</p>
Modified: index
===================================================================
--- index 2012-06-22 20:54:07 UTC (rev 7139)
+++ index 2012-06-22 21:53:55 UTC (rev 7140)
@@ -66068,84 +66068,6 @@
</dd>
- <dt>For scripts</dt>
-
- <dd>
-
- <p>The <a href=#origin>origin</a> and <a href=#effective-script-origin>effective script
- origin</a> of a script are determined from another resource,
- called the <i>owner</i>:</p>
-
- <dl class=switch><dt>If a script is in a <code><a href=#the-script-element>script</a></code> element</dt>
-
- <dd>The owner is the <code><a href=#document>Document</a></code> to which the
- <code><a href=#the-script-element>script</a></code> element belongs.</dd>
-
-
- <dt>If a script is in an <a href=#event-handler-content-attributes title="event handler content
- attributes">event handler content attribute</a></dt>
-
- <dd>The owner is the <code><a href=#document>Document</a></code> to which the
- attribute node belongs.</dd>
-
-
- <dt>If a script is a function or other code reference created by
- another script</dt>
-
- <dd>The owner is the script that created it.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> that was returned as the
- location of an HTTP redirect (<a href=#concept-http-equivalent-codes title=concept-http-equivalent-codes>or equivalent</a> in
- other protocols)</dt>
-
- <dd>The owner is the <a href=#url>URL</a> that redirected to the
- <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a>.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in an attribute</dt>
-
- <dd>The owner is the <code><a href=#document>Document</a></code> of the element on
- which the attribute is found.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in a style sheet</dt>
-
- <dd>The owner is the <a href=#url>URL</a> of the style sheet.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
- context</a> is being <a href=#navigate title=navigate>navigated</a>,
- the URL having been provided by the user (e.g. by using a
- <i>bookmarklet</i>)</dt>
-
- <dd>The owner is the <code><a href=#document>Document</a></code> of the <a href=#browsing-context>browsing
- context</a>'s <a href=#active-document>active document</a>.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
- context</a> is being <a href=#navigate title=navigate>navigated</a>,
- the URL having been declared in markup</dt>
-
- <dd>The owner is the <code><a href=#document>Document</a></code> of the element
- (e.g. an <code><a href=#the-a-element>a</a></code> or <code><a href=#the-area-element>area</a></code> element) that
- declared the URL.</dd>
-
-
- <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
- context</a> is being <a href=#navigate title=navigate>navigated</a>,
- the URL having been provided by script</dt>
-
- <dd>The owner is the script that provided the URL.</dd>
-
- </dl><p>The <a href=#origin>origin</a> of the script is then equal to the
- <a href=#origin>origin</a> of the owner, and the <a href=#effective-script-origin>effective script
- origin</a> of the script is equal to the <a href=#effective-script-origin>effective script
- origin</a> of the owner.</p>
-
- </dd>
-
-
<dt>For <code><a href=#document>Document</a></code> objects</dt>
<dd>
@@ -66284,6 +66206,84 @@
</dd>
+
+ <dt>For scripts</dt>
+
+ <dd>
+
+ <p>The <a href=#origin>origin</a> and <a href=#effective-script-origin>effective script
+ origin</a> of a script are determined from another resource,
+ called the <i>owner</i>:</p>
+
+ <dl class=switch><dt>If a script is in a <code><a href=#the-script-element>script</a></code> element</dt>
+
+ <dd>The owner is the <code><a href=#document>Document</a></code> to which the
+ <code><a href=#the-script-element>script</a></code> element belongs.</dd>
+
+
+ <dt>If a script is in an <a href=#event-handler-content-attributes title="event handler content
+ attributes">event handler content attribute</a></dt>
+
+ <dd>The owner is the <code><a href=#document>Document</a></code> to which the
+ attribute node belongs.</dd>
+
+
+ <dt>If a script is a function or other code reference created by
+ another script</dt>
+
+ <dd>The owner is the script that created it.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> that was returned as the
+ location of an HTTP redirect (<a href=#concept-http-equivalent-codes title=concept-http-equivalent-codes>or equivalent</a> in
+ other protocols)</dt>
+
+ <dd>The owner is the <a href=#url>URL</a> that redirected to the
+ <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a>.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in an attribute</dt>
+
+ <dd>The owner is the <code><a href=#document>Document</a></code> of the element on
+ which the attribute is found.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in a style sheet</dt>
+
+ <dd>The owner is the <a href=#url>URL</a> of the style sheet.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+ context</a> is being <a href=#navigate title=navigate>navigated</a>,
+ the URL having been provided by the user (e.g. by using a
+ <i>bookmarklet</i>)</dt>
+
+ <dd>The owner is the <code><a href=#document>Document</a></code> of the <a href=#browsing-context>browsing
+ context</a>'s <a href=#active-document>active document</a>.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+ context</a> is being <a href=#navigate title=navigate>navigated</a>,
+ the URL having been declared in markup</dt>
+
+ <dd>The owner is the <code><a href=#document>Document</a></code> of the element
+ (e.g. an <code><a href=#the-a-element>a</a></code> or <code><a href=#the-area-element>area</a></code> element) that
+ declared the URL.</dd>
+
+
+ <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+ context</a> is being <a href=#navigate title=navigate>navigated</a>,
+ the URL having been provided by script</dt>
+
+ <dd>The owner is the script that provided the URL.</dd>
+
+ </dl><p>The <a href=#origin>origin</a> of the script is then equal to the
+ <a href=#origin>origin</a> of the owner, and the <a href=#effective-script-origin>effective script
+ origin</a> of the script is equal to the <a href=#effective-script-origin>effective script
+ origin</a> of the owner.</p>
+
+ </dd>
+
</dl><p>Other specifications can override the above definitions by
themselves specifying the origin of a particular URL, script,
<code><a href=#document>Document</a></code>, or image.</p>
Modified: source
===================================================================
--- source 2012-06-22 20:54:07 UTC (rev 7139)
+++ source 2012-06-22 21:53:55 UTC (rev 7140)
@@ -77449,96 +77449,6 @@
</dd>
- <dt>For scripts</dt>
-
- <dd>
-
- <p>The <span>origin</span> and <span>effective script
- origin</span> of a script are determined from another resource,
- called the <i>owner</i>:</p>
-
- <dl class="switch">
-
- <dt>If a script is in a <code>script</code> element</dt>
-
- <dd>The owner is the <code>Document</code> to which the
- <code>script</code> element belongs.</dd>
-
-
- <dt>If a script is in an <span title="event handler content
- attributes">event handler content attribute</span></dt>
-
- <dd>The owner is the <code>Document</code> to which the
- attribute node belongs.</dd>
-
-
- <dt>If a script is a function or other code reference created by
- another script</dt>
-
- <dd>The owner is the script that created it.</dd>
-
-
- <dt>If a script is a <span title="javascript protocol"><code
- title="">javascript:</code> URL</span> that was returned as the
- location of an HTTP redirect (<span
- title="concept-http-equivalent-codes">or equivalent</span> in
- other protocols)</dt>
-
- <dd>The owner is the <span>URL</span> that redirected to the
- <span title="javascript protocol"><code
- title="">javascript:</code> URL</span>.</dd>
-
-
- <dt>If a script is a <span title="javascript protocol"><code
- title="">javascript:</code> URL</span> in an attribute</dt>
-
- <dd>The owner is the <code>Document</code> of the element on
- which the attribute is found.</dd>
-
-
- <dt>If a script is a <span title="javascript protocol"><code
- title="">javascript:</code> URL</span> in a style sheet</dt>
-
- <dd>The owner is the <span>URL</span> of the style sheet.</dd>
-
-
- <dt>If a script is a <span title="javascript protocol"><code
- title="">javascript:</code> URL</span> to which a <span>browsing
- context</span> is being <span title="navigate">navigated</span>,
- the URL having been provided by the user (e.g. by using a
- <i>bookmarklet</i>)</dt>
-
- <dd>The owner is the <code>Document</code> of the <span>browsing
- context</span>'s <span>active document</span>.</dd>
-
-
- <dt>If a script is a <span title="javascript protocol"><code
- title="">javascript:</code> URL</span> to which a <span>browsing
- context</span> is being <span title="navigate">navigated</span>,
- the URL having been declared in markup</dt>
-
- <dd>The owner is the <code>Document</code> of the element
- (e.g. an <code>a</code> or <code>area</code> element) that
- declared the URL.</dd>
-
-
- <dt>If a script is a <span title="javascript protocol"><code
- title="">javascript:</code> URL</span> to which a <span>browsing
- context</span> is being <span title="navigate">navigated</span>,
- the URL having been provided by script</dt>
-
- <dd>The owner is the script that provided the URL.</dd>
-
- </dl>
-
- <p>The <span>origin</span> of the script is then equal to the
- <span>origin</span> of the owner, and the <span>effective script
- origin</span> of the script is equal to the <span>effective script
- origin</span> of the owner.</p>
-
- </dd>
-
-
<dt>For <code>Document</code> objects</dt>
<dd>
@@ -77699,6 +77609,96 @@
</dd>
+
+ <dt>For scripts</dt>
+
+ <dd>
+
+ <p>The <span>origin</span> and <span>effective script
+ origin</span> of a script are determined from another resource,
+ called the <i>owner</i>:</p>
+
+ <dl class="switch">
+
+ <dt>If a script is in a <code>script</code> element</dt>
+
+ <dd>The owner is the <code>Document</code> to which the
+ <code>script</code> element belongs.</dd>
+
+
+ <dt>If a script is in an <span title="event handler content
+ attributes">event handler content attribute</span></dt>
+
+ <dd>The owner is the <code>Document</code> to which the
+ attribute node belongs.</dd>
+
+
+ <dt>If a script is a function or other code reference created by
+ another script</dt>
+
+ <dd>The owner is the script that created it.</dd>
+
+
+ <dt>If a script is a <span title="javascript protocol"><code
+ title="">javascript:</code> URL</span> that was returned as the
+ location of an HTTP redirect (<span
+ title="concept-http-equivalent-codes">or equivalent</span> in
+ other protocols)</dt>
+
+ <dd>The owner is the <span>URL</span> that redirected to the
+ <span title="javascript protocol"><code
+ title="">javascript:</code> URL</span>.</dd>
+
+
+ <dt>If a script is a <span title="javascript protocol"><code
+ title="">javascript:</code> URL</span> in an attribute</dt>
+
+ <dd>The owner is the <code>Document</code> of the element on
+ which the attribute is found.</dd>
+
+
+ <dt>If a script is a <span title="javascript protocol"><code
+ title="">javascript:</code> URL</span> in a style sheet</dt>
+
+ <dd>The owner is the <span>URL</span> of the style sheet.</dd>
+
+
+ <dt>If a script is a <span title="javascript protocol"><code
+ title="">javascript:</code> URL</span> to which a <span>browsing
+ context</span> is being <span title="navigate">navigated</span>,
+ the URL having been provided by the user (e.g. by using a
+ <i>bookmarklet</i>)</dt>
+
+ <dd>The owner is the <code>Document</code> of the <span>browsing
+ context</span>'s <span>active document</span>.</dd>
+
+
+ <dt>If a script is a <span title="javascript protocol"><code
+ title="">javascript:</code> URL</span> to which a <span>browsing
+ context</span> is being <span title="navigate">navigated</span>,
+ the URL having been declared in markup</dt>
+
+ <dd>The owner is the <code>Document</code> of the element
+ (e.g. an <code>a</code> or <code>area</code> element) that
+ declared the URL.</dd>
+
+
+ <dt>If a script is a <span title="javascript protocol"><code
+ title="">javascript:</code> URL</span> to which a <span>browsing
+ context</span> is being <span title="navigate">navigated</span>,
+ the URL having been provided by script</dt>
+
+ <dd>The owner is the script that provided the URL.</dd>
+
+ </dl>
+
+ <p>The <span>origin</span> of the script is then equal to the
+ <span>origin</span> of the owner, and the <span>effective script
+ origin</span> of the script is equal to the <span>effective script
+ origin</span> of the owner.</p>
+
+ </dd>
+
</dl>
<p>Other specifications can override the above definitions by
More information about the Commit-Watchers
mailing list