Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
[giow] (2) Fix the rules on what 'Origin' header to use when navigati…
…ng to a resource in an <iframe>, <object>, <embed>, or <frame> element, so that the latter two are not forgotten.

Fixing https://www.w3.org/Bugs/Public/show_bug.cgi?id=23837
Affected topics: HTML

git-svn-id: http://svn.whatwg.org/webapps@8307 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information
Hixie committed Nov 22, 2013
1 parent 5527e04 commit ab14988
Show file tree
Hide file tree
Showing 3 changed files with 14 additions and 12 deletions.
9 changes: 5 additions & 4 deletions complete.html
Expand Up @@ -298,7 +298,7 @@

<header class=head id=head><p><a href=http://www.whatwg.org/ class=logo><img width=101 src=/images/logo alt=WHATWG height=101></a></p>
<hgroup><h1 class=allcaps>HTML</h1>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 21 November 2013</h2>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 22 November 2013</h2>
</hgroup><dl><dt><strong>Web developer edition:</strong></dt>
<dd><strong><a href=http://developers.whatwg.org/>http://developers.whatwg.org/</a></strong></dd>
<dt>Multiple-page version:</dt>
Expand Down Expand Up @@ -66791,9 +66791,10 @@ <h4 id=navigating-across-documents><span class=secno>6.6.1 </span>Navigating acr
potentially http-origin privacy sensitive -->

<p>Otherwise, if the <a href=#browsing-context>browsing context</a> being navigated is a <a href=#child-browsing-context>child browsing
context</a> for an <code><a href=#the-iframe-element>iframe</a></code> or <code><a href=#the-object-element>object</a></code> element, then the <a href=#fetch title=fetch>fetching algorithm</a> must be invoked from the <code><a href=#the-iframe-element>iframe</a></code> or
<code><a href=#the-object-element>object</a></code> element's <a href=#browsing-context-scope-origin>browsing context scope origin</a>, if it has one.</p>
<!-- potentially http-origin privacy sensitive -->
context</a>, then the <a href=#fetch title=fetch>fetching algorithm</a> must be invoked from the
<a href=#browsing-context-scope-origin>browsing context scope origin</a> of the <a href=#browsing-context-container>browsing context container</a> of the
<a href=#browsing-context>browsing context</a> being navigated, if it has one.</p> <!-- potentially http-origin
privacy sensitive -->

</li>

Expand Down
9 changes: 5 additions & 4 deletions index
Expand Up @@ -298,7 +298,7 @@

<header class=head id=head><p><a href=http://www.whatwg.org/ class=logo><img width=101 src=/images/logo alt=WHATWG height=101></a></p>
<hgroup><h1 class=allcaps>HTML</h1>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 21 November 2013</h2>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 22 November 2013</h2>
</hgroup><dl><dt><strong>Web developer edition:</strong></dt>
<dd><strong><a href=http://developers.whatwg.org/>http://developers.whatwg.org/</a></strong></dd>
<dt>Multiple-page version:</dt>
Expand Down Expand Up @@ -66791,9 +66791,10 @@ State: &lt;OUTPUT NAME=I&gt;1&lt;/OUTPUT&gt; &lt;INPUT VALUE="Increment" TYPE=BU
potentially http-origin privacy sensitive -->

<p>Otherwise, if the <a href=#browsing-context>browsing context</a> being navigated is a <a href=#child-browsing-context>child browsing
context</a> for an <code><a href=#the-iframe-element>iframe</a></code> or <code><a href=#the-object-element>object</a></code> element, then the <a href=#fetch title=fetch>fetching algorithm</a> must be invoked from the <code><a href=#the-iframe-element>iframe</a></code> or
<code><a href=#the-object-element>object</a></code> element's <a href=#browsing-context-scope-origin>browsing context scope origin</a>, if it has one.</p>
<!-- potentially http-origin privacy sensitive -->
context</a>, then the <a href=#fetch title=fetch>fetching algorithm</a> must be invoked from the
<a href=#browsing-context-scope-origin>browsing context scope origin</a> of the <a href=#browsing-context-container>browsing context container</a> of the
<a href=#browsing-context>browsing context</a> being navigated, if it has one.</p> <!-- potentially http-origin
privacy sensitive -->

</li>

Expand Down
8 changes: 4 additions & 4 deletions source
Expand Up @@ -74398,10 +74398,10 @@ State: &lt;OUTPUT NAME=I>1&lt;/OUTPUT> &lt;INPUT VALUE="Increment" TYPE=BUTTON O
potentially http-origin privacy sensitive -->

<p>Otherwise, if the <span>browsing context</span> being navigated is a <span>child browsing
context</span> for an <code>iframe</code> or <code>object</code> element, then the <span
data-x="fetch">fetching algorithm</span> must be invoked from the <code>iframe</code> or
<code>object</code> element's <span>browsing context scope origin</span>, if it has one.</p>
<!-- potentially http-origin privacy sensitive -->
context</span>, then the <span data-x="fetch">fetching algorithm</span> must be invoked from the
<span>browsing context scope origin</span> of the <span>browsing context container</span> of the
<span>browsing context</span> being navigated, if it has one.</p> <!-- potentially http-origin
privacy sensitive -->

</li>

Expand Down

0 comments on commit ab14988

Please sign in to comment.