[whatwg] Application deployment

[Adam Barth]

On Sun, Jul 27, 2008 at 11:55 PM, Kristof Zelechovski
<giecrilj at stegny.2a.pl> wrote:
> <jar:http://www.example.com/site.jar!/path/inside/foo.html>?
> What kind of a syntax is that??  JAR is not a protocol, it is a content
> type.

In Firefox, jar is a protocol that means retrieve the enclosed URL,
unzip the contents, and look for the path after the "!".  I suspect
the reason the Firefox developers chose ! to separate the URL to the
JAR from the path within the JAR is that ! is not a valid URL
character.

> It should rather be
> <http://www.example.com/site.jar#path/inside/foo.html>.  It reads: retrieve
> the resource "site.jar" using the HTTP protocol and look into it for the
> fragment "foo.html".  I do not know how to read the original notation and I
> think it should be withdrawn.

Withdrawn from what?  This feature has already shipped in a number of
versions of Firefox.  The main value of using the packaged archive is
that the content author can sign the archive.  For example, this is
the mechanism used for Firefox extensions.

My guess is this mechanism will not be included in HTML 5 because some
of the other browser vendors have expressed their distaste for nested
URL schemes.


> Chris
> -----Original Message-----
> From: whatwg-bounces at lists.whatwg.org
> [mailto:whatwg-bounces at lists.whatwg.org] On Behalf Of Adam Barth
> Sent: Sunday, July 27, 2008 11:33 PM
> To: Philipp Serafin
> Cc: whatwg at whatwg.org; Russell Leggett
> Subject: Re: [whatwg] Application deployment
>
> Firefox already implements this today with the jar protocol.  Put your
> content into a zip archive and access it using this kind of URL:
>
> jar:http://www.example.com/site.jar!/path/inside/foo.html
>
> I'm not sure many sites use this feature, but it has been a source of
> several recent security issues.
>
> Adam
>
>
>
>