[whatwg] Sandboxing scripts: call for a wider discussion

Alexey Feldgendler alexey at feldgendler.ru
Mon Jan 23 04:17:54 PST 2006


On Mon, 23 Jan 2006 17:28:31 +0600, Jim Ley <jim.ley at gmail.com> wrote:

>> I'm surprised. document.write is defined but it's substantially  
>> different
>>  from what the browsers implement. DOM 2 says that write() can be called
>> only between calls to open() and close(), and that a call to open()  
>> clears
>> the existing content of the document.

> That's because the existence of a global object called document that
> points to the current document doesn't exist in any standard.

It's not global, it's a member of "window", but the window happens to be  
the default scope.

>> This is very different from the
>> current practice of calling write() without open() to inject unparsed  
>> HTML into an already-parsed document.

> Er, no, no UA supports this, it supports it in HTML documents _that
> are being parsed_ but not ones that are already parsed where
> document.write performs an implied document.open() so content is
> cleared.

This makes it more clear how document.write works.


-- 
Opera M2 8.5 on Debian Linux 2.6.12-1-k7
* Origin: X-Man's Station [ICQ: 115226275] <alexey at feldgendler.ru>



More information about the whatwg mailing list