[whatwg] window.status and window.defaultStatus

James Graham jgraham at opera.com
Mon Jul 25 01:48:25 PDT 2011


On 07/25/2011 05:30 AM, Bjartur Thorlacius wrote:
> Are JavaScript implementors willing to reimplement window.status? There
> are obvious security problems with drawing an author-provided string
> where a certain URI is expected, but could window.defaultStatus not set
> the name (_NET_WM_NAME or equivalent) of the script's window and
> window.status either override window.defaultStatus temporarily, or sent
> to the user, e.g. through Growl or as a Windows toast.
> The window name is already accessible to scripts (by modifying the text
> child of <title> through the DOM) so no new security concerns are
> introduced. The Growl binding might well be better by a new function,
> though.

If you want OS-level notifications you might be interested in [1]

[1] http://dev.w3.org/2006/webapi/WebNotifications/



More information about the whatwg mailing list