[giow] (2) Drop #fragments from Referer headers.

Fixing http://www.w3.org/Bugs/Public/show_bug.cgi?id=8044 git-svn-id: http://svn.whatwg.org/webapps@4329 340c8d12-0b0e-0410-8428-c7bf67bfef74
whatwg · Oct 25, 2009 · 8fdb3c1 · 8fdb3c1
1 parent 278780a
commit 8fdb3c1
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 14 deletions.
diff --git a/complete.html b/complete.html
@@ -5228,7 +5228,12 @@ <h3 id=fetching-resources><span class=secno>2.6 </span>Fetching resources</h3>
      browsing context">browsing context</a> of the <a href=#first-script>first
      script</a>.</dd>
 
-    </dl></li>
+    </dl><p>Remove any <a href=#url-fragment title=url-fragment>&lt;fragment&gt;</a>
+    component from the generated <i>address of the resource from which
+    Request-URIs are obtained</i>.</p> <!-- RFC2616 says "The URI MUST
+    NOT include a fragment." (section 14.36) -->
+
+   </li>
 
    <li><p>Perform the remaining steps asynchronously.</li>
 
@@ -6924,10 +6929,10 @@ <h4 id=resource-metadata-management><span class=secno>3.1.3 </span><dfn>Resource
   address">current address</a> of the <a href=#active-document>active document</a>
   of the <a href=#source-browsing-context>source browsing context</a> <em>at the time the
   navigation was started</em> (that is, the page which <a href=#navigate title=navigate>navigated</a> the <a href=#browsing-context>browsing context</a>
-  to the current document), or the empty string if there is no such
-  originating page, or if the UA has been configured not to report
-  referrers in this case, or if the navigation was initiated for a
-  <a href=#hyperlink>hyperlink</a> with a <code title=rel-noreferrer><a href=#link-type-noreferrer>noreferrer</a></code> keyword.</p>
+  to the current document), with any <a href=#url-fragment title=url-fragment>&lt;fragment&gt;</a> component removed; or
+  the empty string if there is no such originating page, or if the UA
+  has been configured not to report referrers in this case, or if the
+  navigation was initiated for a <a href=#hyperlink>hyperlink</a> with a <code title=rel-noreferrer><a href=#link-type-noreferrer>noreferrer</a></code> keyword.</p>
 
   <p class=note>In the case of HTTP, the <code title=dom-document-referrer><a href=#dom-document-referrer>referrer</a></code> IDL attribute will
   match the <code title=http-referer>Referer</code> (sic) header

diff --git a/index b/index
@@ -5038,7 +5038,12 @@ a.setAttribute('href', 'http://example.com/'); // change the content attribute d
      browsing context">browsing context</a> of the <a href=#first-script>first
      script</a>.</dd>
 
-    </dl></li>
+    </dl><p>Remove any <a href=#url-fragment title=url-fragment>&lt;fragment&gt;</a>
+    component from the generated <i>address of the resource from which
+    Request-URIs are obtained</i>.</p> <!-- RFC2616 says "The URI MUST
+    NOT include a fragment." (section 14.36) -->
+
+   </li>
 
    <li><p>Perform the remaining steps asynchronously.</li>
 
@@ -6734,10 +6739,10 @@ interface <dfn id=htmldocument>HTMLDocument</dfn> {
   address">current address</a> of the <a href=#active-document>active document</a>
   of the <a href=#source-browsing-context>source browsing context</a> <em>at the time the
   navigation was started</em> (that is, the page which <a href=#navigate title=navigate>navigated</a> the <a href=#browsing-context>browsing context</a>
-  to the current document), or the empty string if there is no such
-  originating page, or if the UA has been configured not to report
-  referrers in this case, or if the navigation was initiated for a
-  <a href=#hyperlink>hyperlink</a> with a <code title=rel-noreferrer><a href=#link-type-noreferrer>noreferrer</a></code> keyword.</p>
+  to the current document), with any <a href=#url-fragment title=url-fragment>&lt;fragment&gt;</a> component removed; or
+  the empty string if there is no such originating page, or if the UA
+  has been configured not to report referrers in this case, or if the
+  navigation was initiated for a <a href=#hyperlink>hyperlink</a> with a <code title=rel-noreferrer><a href=#link-type-noreferrer>noreferrer</a></code> keyword.</p>
 
   <p class=note>In the case of HTTP, the <code title=dom-document-referrer><a href=#dom-document-referrer>referrer</a></code> IDL attribute will
   match the <code title=http-referer>Referer</code> (sic) header

diff --git a/source b/source
@@ -4721,6 +4721,11 @@ a.setAttribute('href', 'http://example.com/'); // change the content attribute d
 
     </dl>
 
+    <p>Remove any <span title="url-fragment">&lt;fragment&gt;</span>
+    component from the generated <i>address of the resource from which
+    Request-URIs are obtained</i>.</p> <!-- RFC2616 says "The URI MUST
+    NOT include a fragment." (section 14.36) -->
+
    </li>
 
    <li><p>Perform the remaining steps asynchronously.</p></li>
@@ -6658,10 +6663,11 @@ interface <dfn>HTMLDocument</dfn> {
   of the <span>source browsing context</span> <em>at the time the
   navigation was started</em> (that is, the page which <span
   title="navigate">navigated</span> the <span>browsing context</span>
-  to the current document), or the empty string if there is no such
-  originating page, or if the UA has been configured not to report
-  referrers in this case, or if the navigation was initiated for a
-  <span>hyperlink</span> with a <code
+  to the current document), with any <span
+  title="url-fragment">&lt;fragment&gt;</span> component removed; or
+  the empty string if there is no such originating page, or if the UA
+  has been configured not to report referrers in this case, or if the
+  navigation was initiated for a <span>hyperlink</span> with a <code
   title="rel-noreferrer">noreferrer</code> keyword.</p>
 
   <p class="note">In the case of HTTP, the <code