Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
[] (0) Require that <script src=javascript:...></script> result in no…
… script execution, for any value of '...', for compatibility with most UAs.

git-svn-id: http://svn.whatwg.org/webapps@2046 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information
Hixie committed Aug 11, 2008
1 parent 3fbe983 commit 6251e0e
Show file tree
Hide file tree
Showing 2 changed files with 16 additions and 0 deletions.
8 changes: 8 additions & 0 deletions index
Expand Up @@ -26331,6 +26331,14 @@ function AddCloud(data, x, y) { ... }</pre>
href="#src9">src</a></code> attribute, then the specified resource must
be <a href="#fetch" title=fetch>fetched</a>.</p>

<p>For historical reasons, if the <a href="#url">URL</a> is a <a
href="#the-javascript" title="javascript protocol"><code
title="">javascript:</code> URL</a>, then the user agent must not,
despite the requirements in the definition of the <a href="#fetch"
title=fetch>fetching</a> algorithm, actually execute the given script,
and instead the user agent must act as if it had received an empty HTTP
400 response.</p>

<p>Once the fetching process has completed, and the script has <dfn
id=completed>completed loading</dfn>, the user agent will have to
complete <a href="#when-a" title="when a script completes loading">the
Expand Down
8 changes: 8 additions & 0 deletions source
Expand Up @@ -23714,6 +23714,14 @@ function AddCloud(data, x, y) { ... }</pre>
attribute, then the specified resource must be <span
title="fetch">fetched</span>.</p>

<p>For historical reasons, if the <span>URL</span> is a <span
title="javascript protocol"><code title="">javascript:</code>
URL</span>, then the user agent must not, despite the requirements
in the definition of the <span title="fetch">fetching</span>
algorithm, actually execute the given script, and instead the user
agent must act as if it had received an empty HTTP 400
response.</p>

<p>Once the fetching process has completed, and the script has
<dfn>completed loading</dfn>, the user agent will have to complete
<span title="when a script completes loading">the steps described
Expand Down

0 comments on commit 6251e0e

Please sign in to comment.