[html5] r7140 - [e] (0) move the definition of 'script' for origins down a bit. Affected topics: [...]

whatwg at whatwg.org whatwg at whatwg.org
Fri Jun 22 14:53:56 PDT 2012


Author: ianh
Date: 2012-06-22 14:53:55 -0700 (Fri, 22 Jun 2012)
New Revision: 7140

Modified:
   complete.html
   index
   source
Log:
[e] (0) move the definition of 'script' for origins down a bit.
Affected topics: Security

Modified: complete.html
===================================================================
--- complete.html	2012-06-22 20:54:07 UTC (rev 7139)
+++ complete.html	2012-06-22 21:53:55 UTC (rev 7140)
@@ -66068,84 +66068,6 @@
    </dd>
 
 
-   <dt>For scripts</dt>
-
-   <dd>
-
-    <p>The <a href=#origin>origin</a> and <a href=#effective-script-origin>effective script
-    origin</a> of a script are determined from another resource,
-    called the <i>owner</i>:</p>
-
-    <dl class=switch><dt>If a script is in a <code><a href=#the-script-element>script</a></code> element</dt>
-
-     <dd>The owner is the <code><a href=#document>Document</a></code> to which the
-     <code><a href=#the-script-element>script</a></code> element belongs.</dd>
-
-
-     <dt>If a script is in an <a href=#event-handler-content-attributes title="event handler content
-     attributes">event handler content attribute</a></dt>
-
-     <dd>The owner is the <code><a href=#document>Document</a></code> to which the
-     attribute node belongs.</dd>
-
-
-     <dt>If a script is a function or other code reference created by
-     another script</dt>
-
-     <dd>The owner is the script that created it.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> that was returned as the
-     location of an HTTP redirect (<a href=#concept-http-equivalent-codes title=concept-http-equivalent-codes>or equivalent</a> in
-     other protocols)</dt>
-
-     <dd>The owner is the <a href=#url>URL</a> that redirected to the
-     <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a>.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in an attribute</dt>
-
-     <dd>The owner is the <code><a href=#document>Document</a></code> of the element on
-     which the attribute is found.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in a style sheet</dt>
-
-     <dd>The owner is the <a href=#url>URL</a> of the style sheet.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
-     context</a> is being <a href=#navigate title=navigate>navigated</a>,
-     the URL having been provided by the user (e.g. by using a
-     <i>bookmarklet</i>)</dt>
-
-     <dd>The owner is the <code><a href=#document>Document</a></code> of the <a href=#browsing-context>browsing
-     context</a>'s <a href=#active-document>active document</a>.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
-     context</a> is being <a href=#navigate title=navigate>navigated</a>,
-     the URL having been declared in markup</dt>
-
-     <dd>The owner is the <code><a href=#document>Document</a></code> of the element
-     (e.g. an <code><a href=#the-a-element>a</a></code> or <code><a href=#the-area-element>area</a></code> element) that
-     declared the URL.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
-     context</a> is being <a href=#navigate title=navigate>navigated</a>,
-     the URL having been provided by script</dt>
-
-     <dd>The owner is the script that provided the URL.</dd>
-
-    </dl><p>The <a href=#origin>origin</a> of the script is then equal to the
-    <a href=#origin>origin</a> of the owner, and the <a href=#effective-script-origin>effective script
-    origin</a> of the script is equal to the <a href=#effective-script-origin>effective script
-    origin</a> of the owner.</p>
-
-   </dd>
-
-
    <dt>For <code><a href=#document>Document</a></code> objects</dt>
 
    <dd>
@@ -66284,6 +66206,84 @@
 
    </dd>
 
+
+   <dt>For scripts</dt>
+
+   <dd>
+
+    <p>The <a href=#origin>origin</a> and <a href=#effective-script-origin>effective script
+    origin</a> of a script are determined from another resource,
+    called the <i>owner</i>:</p>
+
+    <dl class=switch><dt>If a script is in a <code><a href=#the-script-element>script</a></code> element</dt>
+
+     <dd>The owner is the <code><a href=#document>Document</a></code> to which the
+     <code><a href=#the-script-element>script</a></code> element belongs.</dd>
+
+
+     <dt>If a script is in an <a href=#event-handler-content-attributes title="event handler content
+     attributes">event handler content attribute</a></dt>
+
+     <dd>The owner is the <code><a href=#document>Document</a></code> to which the
+     attribute node belongs.</dd>
+
+
+     <dt>If a script is a function or other code reference created by
+     another script</dt>
+
+     <dd>The owner is the script that created it.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> that was returned as the
+     location of an HTTP redirect (<a href=#concept-http-equivalent-codes title=concept-http-equivalent-codes>or equivalent</a> in
+     other protocols)</dt>
+
+     <dd>The owner is the <a href=#url>URL</a> that redirected to the
+     <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a>.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in an attribute</dt>
+
+     <dd>The owner is the <code><a href=#document>Document</a></code> of the element on
+     which the attribute is found.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in a style sheet</dt>
+
+     <dd>The owner is the <a href=#url>URL</a> of the style sheet.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+     context</a> is being <a href=#navigate title=navigate>navigated</a>,
+     the URL having been provided by the user (e.g. by using a
+     <i>bookmarklet</i>)</dt>
+
+     <dd>The owner is the <code><a href=#document>Document</a></code> of the <a href=#browsing-context>browsing
+     context</a>'s <a href=#active-document>active document</a>.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+     context</a> is being <a href=#navigate title=navigate>navigated</a>,
+     the URL having been declared in markup</dt>
+
+     <dd>The owner is the <code><a href=#document>Document</a></code> of the element
+     (e.g. an <code><a href=#the-a-element>a</a></code> or <code><a href=#the-area-element>area</a></code> element) that
+     declared the URL.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+     context</a> is being <a href=#navigate title=navigate>navigated</a>,
+     the URL having been provided by script</dt>
+
+     <dd>The owner is the script that provided the URL.</dd>
+
+    </dl><p>The <a href=#origin>origin</a> of the script is then equal to the
+    <a href=#origin>origin</a> of the owner, and the <a href=#effective-script-origin>effective script
+    origin</a> of the script is equal to the <a href=#effective-script-origin>effective script
+    origin</a> of the owner.</p>
+
+   </dd>
+
   </dl><p>Other specifications can override the above definitions by
   themselves specifying the origin of a particular URL, script,
   <code><a href=#document>Document</a></code>, or image.</p>

Modified: index
===================================================================
--- index	2012-06-22 20:54:07 UTC (rev 7139)
+++ index	2012-06-22 21:53:55 UTC (rev 7140)
@@ -66068,84 +66068,6 @@
    </dd>
 
 
-   <dt>For scripts</dt>
-
-   <dd>
-
-    <p>The <a href=#origin>origin</a> and <a href=#effective-script-origin>effective script
-    origin</a> of a script are determined from another resource,
-    called the <i>owner</i>:</p>
-
-    <dl class=switch><dt>If a script is in a <code><a href=#the-script-element>script</a></code> element</dt>
-
-     <dd>The owner is the <code><a href=#document>Document</a></code> to which the
-     <code><a href=#the-script-element>script</a></code> element belongs.</dd>
-
-
-     <dt>If a script is in an <a href=#event-handler-content-attributes title="event handler content
-     attributes">event handler content attribute</a></dt>
-
-     <dd>The owner is the <code><a href=#document>Document</a></code> to which the
-     attribute node belongs.</dd>
-
-
-     <dt>If a script is a function or other code reference created by
-     another script</dt>
-
-     <dd>The owner is the script that created it.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> that was returned as the
-     location of an HTTP redirect (<a href=#concept-http-equivalent-codes title=concept-http-equivalent-codes>or equivalent</a> in
-     other protocols)</dt>
-
-     <dd>The owner is the <a href=#url>URL</a> that redirected to the
-     <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a>.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in an attribute</dt>
-
-     <dd>The owner is the <code><a href=#document>Document</a></code> of the element on
-     which the attribute is found.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in a style sheet</dt>
-
-     <dd>The owner is the <a href=#url>URL</a> of the style sheet.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
-     context</a> is being <a href=#navigate title=navigate>navigated</a>,
-     the URL having been provided by the user (e.g. by using a
-     <i>bookmarklet</i>)</dt>
-
-     <dd>The owner is the <code><a href=#document>Document</a></code> of the <a href=#browsing-context>browsing
-     context</a>'s <a href=#active-document>active document</a>.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
-     context</a> is being <a href=#navigate title=navigate>navigated</a>,
-     the URL having been declared in markup</dt>
-
-     <dd>The owner is the <code><a href=#document>Document</a></code> of the element
-     (e.g. an <code><a href=#the-a-element>a</a></code> or <code><a href=#the-area-element>area</a></code> element) that
-     declared the URL.</dd>
-
-
-     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
-     context</a> is being <a href=#navigate title=navigate>navigated</a>,
-     the URL having been provided by script</dt>
-
-     <dd>The owner is the script that provided the URL.</dd>
-
-    </dl><p>The <a href=#origin>origin</a> of the script is then equal to the
-    <a href=#origin>origin</a> of the owner, and the <a href=#effective-script-origin>effective script
-    origin</a> of the script is equal to the <a href=#effective-script-origin>effective script
-    origin</a> of the owner.</p>
-
-   </dd>
-
-
    <dt>For <code><a href=#document>Document</a></code> objects</dt>
 
    <dd>
@@ -66284,6 +66206,84 @@
 
    </dd>
 
+
+   <dt>For scripts</dt>
+
+   <dd>
+
+    <p>The <a href=#origin>origin</a> and <a href=#effective-script-origin>effective script
+    origin</a> of a script are determined from another resource,
+    called the <i>owner</i>:</p>
+
+    <dl class=switch><dt>If a script is in a <code><a href=#the-script-element>script</a></code> element</dt>
+
+     <dd>The owner is the <code><a href=#document>Document</a></code> to which the
+     <code><a href=#the-script-element>script</a></code> element belongs.</dd>
+
+
+     <dt>If a script is in an <a href=#event-handler-content-attributes title="event handler content
+     attributes">event handler content attribute</a></dt>
+
+     <dd>The owner is the <code><a href=#document>Document</a></code> to which the
+     attribute node belongs.</dd>
+
+
+     <dt>If a script is a function or other code reference created by
+     another script</dt>
+
+     <dd>The owner is the script that created it.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> that was returned as the
+     location of an HTTP redirect (<a href=#concept-http-equivalent-codes title=concept-http-equivalent-codes>or equivalent</a> in
+     other protocols)</dt>
+
+     <dd>The owner is the <a href=#url>URL</a> that redirected to the
+     <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a>.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in an attribute</dt>
+
+     <dd>The owner is the <code><a href=#document>Document</a></code> of the element on
+     which the attribute is found.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> in a style sheet</dt>
+
+     <dd>The owner is the <a href=#url>URL</a> of the style sheet.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+     context</a> is being <a href=#navigate title=navigate>navigated</a>,
+     the URL having been provided by the user (e.g. by using a
+     <i>bookmarklet</i>)</dt>
+
+     <dd>The owner is the <code><a href=#document>Document</a></code> of the <a href=#browsing-context>browsing
+     context</a>'s <a href=#active-document>active document</a>.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+     context</a> is being <a href=#navigate title=navigate>navigated</a>,
+     the URL having been declared in markup</dt>
+
+     <dd>The owner is the <code><a href=#document>Document</a></code> of the element
+     (e.g. an <code><a href=#the-a-element>a</a></code> or <code><a href=#the-area-element>area</a></code> element) that
+     declared the URL.</dd>
+
+
+     <dt>If a script is a <a href=#javascript-protocol title="javascript protocol"><code title="">javascript:</code> URL</a> to which a <a href=#browsing-context>browsing
+     context</a> is being <a href=#navigate title=navigate>navigated</a>,
+     the URL having been provided by script</dt>
+
+     <dd>The owner is the script that provided the URL.</dd>
+
+    </dl><p>The <a href=#origin>origin</a> of the script is then equal to the
+    <a href=#origin>origin</a> of the owner, and the <a href=#effective-script-origin>effective script
+    origin</a> of the script is equal to the <a href=#effective-script-origin>effective script
+    origin</a> of the owner.</p>
+
+   </dd>
+
   </dl><p>Other specifications can override the above definitions by
   themselves specifying the origin of a particular URL, script,
   <code><a href=#document>Document</a></code>, or image.</p>

Modified: source
===================================================================
--- source	2012-06-22 20:54:07 UTC (rev 7139)
+++ source	2012-06-22 21:53:55 UTC (rev 7140)
@@ -77449,96 +77449,6 @@
    </dd>
 
 
-   <dt>For scripts</dt>
-
-   <dd>
-
-    <p>The <span>origin</span> and <span>effective script
-    origin</span> of a script are determined from another resource,
-    called the <i>owner</i>:</p>
-
-    <dl class="switch">
-
-     <dt>If a script is in a <code>script</code> element</dt>
-
-     <dd>The owner is the <code>Document</code> to which the
-     <code>script</code> element belongs.</dd>
-
-
-     <dt>If a script is in an <span title="event handler content
-     attributes">event handler content attribute</span></dt>
-
-     <dd>The owner is the <code>Document</code> to which the
-     attribute node belongs.</dd>
-
-
-     <dt>If a script is a function or other code reference created by
-     another script</dt>
-
-     <dd>The owner is the script that created it.</dd>
-
-
-     <dt>If a script is a <span title="javascript protocol"><code
-     title="">javascript:</code> URL</span> that was returned as the
-     location of an HTTP redirect (<span
-     title="concept-http-equivalent-codes">or equivalent</span> in
-     other protocols)</dt>
-
-     <dd>The owner is the <span>URL</span> that redirected to the
-     <span title="javascript protocol"><code
-     title="">javascript:</code> URL</span>.</dd>
-
-
-     <dt>If a script is a <span title="javascript protocol"><code
-     title="">javascript:</code> URL</span> in an attribute</dt>
-
-     <dd>The owner is the <code>Document</code> of the element on
-     which the attribute is found.</dd>
-
-
-     <dt>If a script is a <span title="javascript protocol"><code
-     title="">javascript:</code> URL</span> in a style sheet</dt>
-
-     <dd>The owner is the <span>URL</span> of the style sheet.</dd>
-
-
-     <dt>If a script is a <span title="javascript protocol"><code
-     title="">javascript:</code> URL</span> to which a <span>browsing
-     context</span> is being <span title="navigate">navigated</span>,
-     the URL having been provided by the user (e.g. by using a
-     <i>bookmarklet</i>)</dt>
-
-     <dd>The owner is the <code>Document</code> of the <span>browsing
-     context</span>'s <span>active document</span>.</dd>
-
-
-     <dt>If a script is a <span title="javascript protocol"><code
-     title="">javascript:</code> URL</span> to which a <span>browsing
-     context</span> is being <span title="navigate">navigated</span>,
-     the URL having been declared in markup</dt>
-
-     <dd>The owner is the <code>Document</code> of the element
-     (e.g. an <code>a</code> or <code>area</code> element) that
-     declared the URL.</dd>
-
-
-     <dt>If a script is a <span title="javascript protocol"><code
-     title="">javascript:</code> URL</span> to which a <span>browsing
-     context</span> is being <span title="navigate">navigated</span>,
-     the URL having been provided by script</dt>
-
-     <dd>The owner is the script that provided the URL.</dd>
-
-    </dl>
-
-    <p>The <span>origin</span> of the script is then equal to the
-    <span>origin</span> of the owner, and the <span>effective script
-    origin</span> of the script is equal to the <span>effective script
-    origin</span> of the owner.</p>
-
-   </dd>
-
-
    <dt>For <code>Document</code> objects</dt>
 
    <dd>
@@ -77699,6 +77609,96 @@
 
    </dd>
 
+
+   <dt>For scripts</dt>
+
+   <dd>
+
+    <p>The <span>origin</span> and <span>effective script
+    origin</span> of a script are determined from another resource,
+    called the <i>owner</i>:</p>
+
+    <dl class="switch">
+
+     <dt>If a script is in a <code>script</code> element</dt>
+
+     <dd>The owner is the <code>Document</code> to which the
+     <code>script</code> element belongs.</dd>
+
+
+     <dt>If a script is in an <span title="event handler content
+     attributes">event handler content attribute</span></dt>
+
+     <dd>The owner is the <code>Document</code> to which the
+     attribute node belongs.</dd>
+
+
+     <dt>If a script is a function or other code reference created by
+     another script</dt>
+
+     <dd>The owner is the script that created it.</dd>
+
+
+     <dt>If a script is a <span title="javascript protocol"><code
+     title="">javascript:</code> URL</span> that was returned as the
+     location of an HTTP redirect (<span
+     title="concept-http-equivalent-codes">or equivalent</span> in
+     other protocols)</dt>
+
+     <dd>The owner is the <span>URL</span> that redirected to the
+     <span title="javascript protocol"><code
+     title="">javascript:</code> URL</span>.</dd>
+
+
+     <dt>If a script is a <span title="javascript protocol"><code
+     title="">javascript:</code> URL</span> in an attribute</dt>
+
+     <dd>The owner is the <code>Document</code> of the element on
+     which the attribute is found.</dd>
+
+
+     <dt>If a script is a <span title="javascript protocol"><code
+     title="">javascript:</code> URL</span> in a style sheet</dt>
+
+     <dd>The owner is the <span>URL</span> of the style sheet.</dd>
+
+
+     <dt>If a script is a <span title="javascript protocol"><code
+     title="">javascript:</code> URL</span> to which a <span>browsing
+     context</span> is being <span title="navigate">navigated</span>,
+     the URL having been provided by the user (e.g. by using a
+     <i>bookmarklet</i>)</dt>
+
+     <dd>The owner is the <code>Document</code> of the <span>browsing
+     context</span>'s <span>active document</span>.</dd>
+
+
+     <dt>If a script is a <span title="javascript protocol"><code
+     title="">javascript:</code> URL</span> to which a <span>browsing
+     context</span> is being <span title="navigate">navigated</span>,
+     the URL having been declared in markup</dt>
+
+     <dd>The owner is the <code>Document</code> of the element
+     (e.g. an <code>a</code> or <code>area</code> element) that
+     declared the URL.</dd>
+
+
+     <dt>If a script is a <span title="javascript protocol"><code
+     title="">javascript:</code> URL</span> to which a <span>browsing
+     context</span> is being <span title="navigate">navigated</span>,
+     the URL having been provided by script</dt>
+
+     <dd>The owner is the script that provided the URL.</dd>
+
+    </dl>
+
+    <p>The <span>origin</span> of the script is then equal to the
+    <span>origin</span> of the owner, and the <span>effective script
+    origin</span> of the script is equal to the <span>effective script
+    origin</span> of the owner.</p>
+
+   </dd>
+
   </dl>
 
   <p>Other specifications can override the above definitions by




More information about the Commit-Watchers mailing list