- From: Maciej Stachowiak <mjs@apple.com>
- Date: Fri, 24 Mar 2006 22:23:28 -0800
- To: Boris Zbarsky <bzbarsky@mit.edu>
- Cc: "Web APIs WG (public)" <public-webapi@w3.org>
On Mar 6, 2006, at 11:09 PM, Boris Zbarsky wrote: > > Yet another question on window.name. What should happen in the > situation that is described in https://bugzilla.mozilla.org/ > show_bug.cgi?id=269174 ? It's not immediately clear to me. The name set by "window.open" persists across document loads normally, and this seems analogous. But it does seem bad for a document to be able to set state that breaks the behavior of another document loaded subsequently. Can you think of a way the existing browser behavior might be exploitable? Conversely, do you have a proposal for what the behavior should be? At the very least, the Window spec should not rule out clearing the name property on navigation. Regards, Maciej
Received on Saturday, 25 March 2006 06:23:37 UTC