[whatwg] window.status and window.defaultStatus

Ian Hickson ian at hixie.ch
Fri Jan 20 14:15:41 PST 2012

On Mon, 25 Jul 2011, Bjartur Thorlacius wrote:
> Are JavaScript implementors willing to reimplement window.status? There are
> obvious security problems with drawing an author-provided string where a
> certain URI is expected, but could window.defaultStatus not set the name
> (_NET_WM_NAME or equivalent) of the script's window and window.status either
> override window.defaultStatus temporarily, or sent to the user, e.g. through
> Growl or as a Windows toast.
> The window name is already accessible to scripts (by modifying the text child
> of <title> through the DOM) so no new security concerns are introduced. The
> Growl binding might well be better by a new function, though.

Historically, window.status support has been removed by browsers. In 
practice, many browsers no longer have status bars anyway.

On Mon, 25 Jul 2011, James Graham wrote:
> If you want OS-level notifications you might be interested in [1]
> [1] http://dev.w3.org/2006/webapi/WebNotifications/


Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'

More information about the whatwg mailing list