Setting document.domain

• From: James Graham <jgraham@opera.com>
• Date: Thu, 18 Dec 2008 18:41:20 +0100
• To: HTML WG <public-html@w3.org>
• Message-ID: <494A8B40.9020706@opera.com>

The algorithm in section 5.3.1 for setting document.domain does not 
cover the fact that document.domain should also throw if it is set to a 
registry controlled domain rather than one controlled by the registrant 
(as determined by e.g. the list at [1], but I don't know if that should 
be a normative reference or not).

[1] http://publicsuffix.org/

Received on Thursday, 18 December 2008 18:00:34 UTC