[whatwg] Javascript: URLs as element attributes
Ian Hickson
ian at hixie.ch
Fri May 13 15:34:36 PDT 2011
On Mon, 14 Feb 2011, Philip Jägenstedt wrote:
>
> For the record, I removed Opera's "support" (I assume it was an
> unintended side-effect) for <object data="javascript:..."> along with
> the rest at the time when I wrote my previous mail in this thread. This
> intentionally doesn't match what the spec says. (Disclaimer: this is
> only my opinion on something that isn't really my area of expertise, so
> others at Opera might decide that the spec is great and push in the
> opposite direction. It seems unlikely at this point, though.)
>
> [...]
>
> Of what has been brought up so far, javascript: as an inline resource is
> not very useful at all, so IMO the only reason to keep it would be for
> legacy compat. I'll follow up on this again once the change to block
> inline javascript: URLs in Opera has been in the wild for a while,
> hopefully reporting that no compat issues have arisen.
Since only Firefox now supports this, I've removed support for it from the
spec. (It's just commented out for now; we can put it back if someone
makes a compelling argument.)
--
Ian Hickson U+1047E )\._.,--....,'``. fL
http://ln.hixie.ch/ U+263A /, _.. \ _\ ;`._ ,.
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
More information about the whatwg
mailing list