[whatwg] Proposal for <iframe sandbox> related change to HTML5 section 4.8.3

Chris Evans cevans at google.com
Tue Dec 8 11:04:23 PST 2009


Hello,

I propose changing this text:

"This flag also prevents script from reading the document.cookie IDL
attribute."

to

"This flag also prevents script from reading or writing the document.cookie
IDL attribute."


This change makes sure the sandbox attribute protects the integrity as well
as confidentiality of the cookies. It also matches what was implemented in
WebKit.


Cheers
Chris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.whatwg.org/pipermail/whatwg-whatwg.org/attachments/20091208/ed338fc6/attachment-0001.htm>


More information about the whatwg mailing list