Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
[giow] (1) appcache: only allow text/cache-manifest with no parameter…
…s or with a charset=utf-8 parameter.

git-svn-id: http://svn.whatwg.org/webapps@6251 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information
Hixie committed Jun 17, 2011
1 parent 964579b commit 32bc24c
Show file tree
Hide file tree
Showing 3 changed files with 40 additions and 33 deletions.
24 changes: 12 additions & 12 deletions complete.html
Expand Up @@ -239,7 +239,7 @@

<header class=head id=head><p><a class=logo href=http://www.whatwg.org/><img alt=WHATWG height=101 src=/images/logo width=101></a></p>
<hgroup><h1>Web Applications 1.0</h1>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 16 June 2011</h2>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 17 June 2011</h2>
</hgroup><dl><dt>Multiple-page version:</dt>
<dd><a href=http://www.whatwg.org/specs/web-apps/current-work/complete/>http://www.whatwg.org/specs/web-apps/current-work/complete/</a></dd>
<dt>One-page version:</dt>
Expand Down Expand Up @@ -66170,11 +66170,12 @@ <h4 id=downloading-or-updating-an-application-cache><span class=secno>6.6.4 </sp
doesn't matter, since this can never be cross-origin -->

<p>If the resource is labeled with the <a href=#mime-type>MIME type</a>
<code><a href=#text/cache-manifest>text/cache-manifest</a></code>, parse <var title="">manifest</var> according to the <a href=#parse-a-manifest title="parse a
manifest">rules for parsing manifests</a>, obtaining a list of
<a href=#concept-appcache-explicit title=concept-appcache-explicit>explicit entries</a>,
<a href=#concept-appcache-fallback title=concept-appcache-fallback>fallback entries</a>
and the <a href=#concept-appcache-fallback-ns title=concept-appcache-fallback-ns>fallback
<code><a href=#text/cache-manifest>text/cache-manifest</a></code>, either with no parameters or
with a single parameter with the name "<code title="">charset</code>" whose value is an <a href=#ascii-case-insensitive>ASCII
case-insensitive</a> match for the string "<code title="">utf-8</code>", parse <var title="">manifest</var>
according to the <a href=#parse-a-manifest title="parse a manifest">rules for parsing
manifests</a>, obtaining a list of <a href=#concept-appcache-explicit title=concept-appcache-explicit>explicit entries</a>, <a href=#concept-appcache-fallback title=concept-appcache-fallback>fallback entries</a> and the
<a href=#concept-appcache-fallback-ns title=concept-appcache-fallback-ns>fallback
namespaces</a> that map to them, entries for the <a href=#concept-appcache-onlinewhitelist title=concept-appcache-onlinewhitelist>online whitelist</a>,
and a value for the <a href=#concept-appcache-onlinewhitelist-wildcard title=concept-appcache-onlinewhitelist-wildcard>online whitelist
wildcard flag</a>.</p>
Expand Down Expand Up @@ -66243,8 +66244,9 @@ <h4 id=downloading-or-updating-an-application-cache><span class=secno>6.6.4 </sp
cancels the download, or the parser for manifests fails when
checking the magic signature), or if the server returned a
redirect, or if the resource is labeled with a <a href=#mime-type>MIME
type</a> other than <code><a href=#text/cache-manifest>text/cache-manifest</a></code>, then run
the <a href=#cache-failure-steps>cache failure steps</a>. <a href=#refsHTTP>[HTTP]</a></p>
type</a> other than <code><a href=#text/cache-manifest>text/cache-manifest</a></code> or has
parameters that do not match the conditions listed earlier, then
run the <a href=#cache-failure-steps>cache failure steps</a>. <a href=#refsHTTP>[HTTP]</a></p>

</li>

Expand Down Expand Up @@ -78953,10 +78955,8 @@ <h4 id=processing-model-5><span class=secno>11.2.3 </span>Processing model</h4>

<p>HTTP 200 OK responses with a <a href=#content-type>Content-Type</a> header
specifying the type <code><a href=#text/event-stream>text/event-stream</a></code>, either with no
parameters or with a single parameter whose name is "<code title="">charset</code>" and whose value is an <span>ASCII
case-insensitive match</span> for "UTF-8", must be processed line by
line <a href=#event-stream-interpretation>as described
below</a>.</p>
parameters or with a single parameter with the name "<code title="">charset</code>" whose value is an <a href=#ascii-case-insensitive>ASCII
case-insensitive</a> match for the string "<code title="">utf-8</code>", must be processed line by line <a href=#event-stream-interpretation>as described below</a>.</p>

<p>When a successful response with a supported <a href=#mime-type>MIME
type</a> is received, such that the user agent begins parsing the
Expand Down
18 changes: 10 additions & 8 deletions index
Expand Up @@ -243,7 +243,7 @@

<header class=head id=head><p><a class=logo href=http://www.whatwg.org/><img alt=WHATWG height=101 src=/images/logo width=101></a></p>
<hgroup><h1 class=allcaps>HTML</h1>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 16 June 2011</h2>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 17 June 2011</h2>
</hgroup><dl><dt><strong>Web developer edition</strong></dt>
<dd><strong><a href=http://developers.whatwg.org/>http://developers.whatwg.org/</a></strong></dd>
<dt>Multiple-page version:</dt>
Expand Down Expand Up @@ -66051,11 +66051,12 @@ NETWORK:
doesn't matter, since this can never be cross-origin -->

<p>If the resource is labeled with the <a href=#mime-type>MIME type</a>
<code><a href=#text/cache-manifest>text/cache-manifest</a></code>, parse <var title="">manifest</var> according to the <a href=#parse-a-manifest title="parse a
manifest">rules for parsing manifests</a>, obtaining a list of
<a href=#concept-appcache-explicit title=concept-appcache-explicit>explicit entries</a>,
<a href=#concept-appcache-fallback title=concept-appcache-fallback>fallback entries</a>
and the <a href=#concept-appcache-fallback-ns title=concept-appcache-fallback-ns>fallback
<code><a href=#text/cache-manifest>text/cache-manifest</a></code>, either with no parameters or
with a single parameter with the name "<code title="">charset</code>" whose value is an <a href=#ascii-case-insensitive>ASCII
case-insensitive</a> match for the string "<code title="">utf-8</code>", parse <var title="">manifest</var>
according to the <a href=#parse-a-manifest title="parse a manifest">rules for parsing
manifests</a>, obtaining a list of <a href=#concept-appcache-explicit title=concept-appcache-explicit>explicit entries</a>, <a href=#concept-appcache-fallback title=concept-appcache-fallback>fallback entries</a> and the
<a href=#concept-appcache-fallback-ns title=concept-appcache-fallback-ns>fallback
namespaces</a> that map to them, entries for the <a href=#concept-appcache-onlinewhitelist title=concept-appcache-onlinewhitelist>online whitelist</a>,
and a value for the <a href=#concept-appcache-onlinewhitelist-wildcard title=concept-appcache-onlinewhitelist-wildcard>online whitelist
wildcard flag</a>.</p>
Expand Down Expand Up @@ -66124,8 +66125,9 @@ NETWORK:
cancels the download, or the parser for manifests fails when
checking the magic signature), or if the server returned a
redirect, or if the resource is labeled with a <a href=#mime-type>MIME
type</a> other than <code><a href=#text/cache-manifest>text/cache-manifest</a></code>, then run
the <a href=#cache-failure-steps>cache failure steps</a>. <a href=#refsHTTP>[HTTP]</a></p>
type</a> other than <code><a href=#text/cache-manifest>text/cache-manifest</a></code> or has
parameters that do not match the conditions listed earlier, then
run the <a href=#cache-failure-steps>cache failure steps</a>. <a href=#refsHTTP>[HTTP]</a></p>

</li>

Expand Down
31 changes: 18 additions & 13 deletions source
Expand Up @@ -75305,12 +75305,16 @@ NETWORK:
doesn't matter, since this can never be cross-origin -->

<p>If the resource is labeled with the <span>MIME type</span>
<code>text/cache-manifest</code>, parse <var
title="">manifest</var> according to the <span title="parse a
manifest">rules for parsing manifests</span>, obtaining a list of
<span title="concept-appcache-explicit">explicit entries</span>,
<span title="concept-appcache-fallback">fallback entries</span>
and the <span title="concept-appcache-fallback-ns">fallback
<code>text/cache-manifest</code>, either with no parameters or
with a single parameter with the name "<code
title="">charset</code>" whose value is an <span>ASCII
case-insensitive</span> match for the string "<code
title="">utf-8</code>", parse <var title="">manifest</var>
according to the <span title="parse a manifest">rules for parsing
manifests</span>, obtaining a list of <span
title="concept-appcache-explicit">explicit entries</span>, <span
title="concept-appcache-fallback">fallback entries</span> and the
<span title="concept-appcache-fallback-ns">fallback
namespaces</span> that map to them, entries for the <span
title="concept-appcache-onlinewhitelist">online whitelist</span>,
and a value for the <span
Expand Down Expand Up @@ -75396,8 +75400,9 @@ NETWORK:
cancels the download, or the parser for manifests fails when
checking the magic signature), or if the server returned a
redirect, or if the resource is labeled with a <span>MIME
type</span> other than <code>text/cache-manifest</code>, then run
the <span>cache failure steps</span>. <a
type</span> other than <code>text/cache-manifest</code> or has
parameters that do not match the conditions listed earlier, then
run the <span>cache failure steps</span>. <a
href="#refsHTTP">[HTTP]</a></p>

</li>
Expand Down Expand Up @@ -89501,11 +89506,11 @@ interface <dfn>EventSource</dfn> {

<p>HTTP 200 OK responses with a <span>Content-Type</span> header
specifying the type <code>text/event-stream</code>, either with no
parameters or with a single parameter whose name is "<code
title="">charset</code>" and whose value is an <span>ASCII
case-insensitive match</span> for "UTF-8", must be processed line by
line <a href="#event-stream-interpretation">as described
below</a>.</p>
parameters or with a single parameter with the name "<code
title="">charset</code>" whose value is an <span>ASCII
case-insensitive</span> match for the string "<code
title="">utf-8</code>", must be processed line by line <a
href="#event-stream-interpretation">as described below</a>.</p>

<p>When a successful response with a supported <span>MIME
type</span> is received, such that the user agent begins parsing the
Expand Down

0 comments on commit 32bc24c

Please sign in to comment.