[e] (0) non-normative text for 'origin'

Fixing https://www.w3.org/Bugs/Public/show_bug.cgi?id=21949 Affected topics: Security git-svn-id: http://svn.whatwg.org/webapps@7938 340c8d12-0b0e-0410-8428-c7bf67bfef74
whatwg · Jun 7, 2013 · 2faa28a · 2faa28a
1 parent 9ec9ab6
commit 2faa28a
Show file tree

Hide file tree

Showing 3 changed files with 32 additions and 2 deletions.
diff --git a/complete.html b/complete.html
@@ -65480,7 +65480,16 @@ <h4 id=the-windowproxy-object><span class=secno>6.2.8 </span>The <code><a href=#
   <h3 id=origin-0><span class=secno>6.3 </span>Origin</h3>
   <!-- Hallowed are the Ori -->
 
-  <p>The <dfn id=origin>origin</dfn> of a resource and the <dfn id=effective-script-origin>effective script origin</dfn> of a resource
+  <p>Origins are the fundamental currency of the Web's security model. Two actors in the Web
+  platform that share an origin are assumed to trust each other and to have the same authority.
+  Actors with differing origins are considered potentially hostile versus each other, and are
+  isolated from each other to varying degrees.</p>
+
+  <p class=example>For example, if Example Bank's Web site, hosted at <code title="">bank.example.com</code>, tries to examine the DOM of Example Charity's Web site, hosted
+  at <code title="">charity.example.org</code>, a <code><a href=#securityerror>SecurityError</a></code> exception will be
+  raised.</p>
+
+  <hr><p>The <dfn id=origin>origin</dfn> of a resource and the <dfn id=effective-script-origin>effective script origin</dfn> of a resource
   are both either opaque identifiers or tuples consisting of a scheme component, a host component, a
   port component, and optionally extra data.</p>
 

diff --git a/index b/index
@@ -65480,7 +65480,16 @@ x === this; // true</pre>
   <h3 id=origin-0><span class=secno>6.3 </span>Origin</h3>
   <!-- Hallowed are the Ori -->
 
-  <p>The <dfn id=origin>origin</dfn> of a resource and the <dfn id=effective-script-origin>effective script origin</dfn> of a resource
+  <p>Origins are the fundamental currency of the Web's security model. Two actors in the Web
+  platform that share an origin are assumed to trust each other and to have the same authority.
+  Actors with differing origins are considered potentially hostile versus each other, and are
+  isolated from each other to varying degrees.</p>
+
+  <p class=example>For example, if Example Bank's Web site, hosted at <code title="">bank.example.com</code>, tries to examine the DOM of Example Charity's Web site, hosted
+  at <code title="">charity.example.org</code>, a <code><a href=#securityerror>SecurityError</a></code> exception will be
+  raised.</p>
+
+  <hr><p>The <dfn id=origin>origin</dfn> of a resource and the <dfn id=effective-script-origin>effective script origin</dfn> of a resource
   are both either opaque identifiers or tuples consisting of a scheme component, a host component, a
   port component, and optionally extra data.</p>
 

diff --git a/source b/source
@@ -73032,6 +73032,18 @@ x === this; // true</pre>
   <h3>Origin</h3>
   <!-- Hallowed are the Ori -->
 
+  <p>Origins are the fundamental currency of the Web's security model. Two actors in the Web
+  platform that share an origin are assumed to trust each other and to have the same authority.
+  Actors with differing origins are considered potentially hostile versus each other, and are
+  isolated from each other to varying degrees.</p>
+
+  <p class="example">For example, if Example Bank's Web site, hosted at <code
+  title="">bank.example.com</code>, tries to examine the DOM of Example Charity's Web site, hosted
+  at <code title="">charity.example.org</code>, a <code>SecurityError</code> exception will be
+  raised.</p>
+
+  <hr>
+
   <p>The <dfn>origin</dfn> of a resource and the <dfn>effective script origin</dfn> of a resource
   are both either opaque identifiers or tuples consisting of a scheme component, a host component, a
   port component, and optionally extra data.</p>