<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://www.w3.org/Bugs/Public/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4"
          urlbase="https://www.w3.org/Bugs/Public/"
          
          maintainer="sysbot+bugzilla@w3.org"
>

    <bug>
          <bug_id>8725</bug_id>
          
          <creation_ts>2010-01-12 12:14:21 +0000</creation_ts>
          <short_desc>text/sandboxed-html vs &lt;iframe sandbox&gt; and backcompat</short_desc>
          <delta_ts>2010-10-04 14:00:24 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>HTML WG</product>
          <component>pre-LC1 HTML5 spec (editor: Ian Hickson)</component>
          <version>unspecified</version>
          <rep_platform>PC</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>WONTFIX</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Simon Pieters">zcorpan</reporter>
          <assigned_to name="Ian &apos;Hixie&apos; Hickson">ian</assigned_to>
          <cc>ian</cc>
    
    <cc>mike</cc>
    
    <cc>public-html-admin</cc>
    
    <cc>public-html-wg-issue-tracking</cc>
    
    <cc>w3c</cc>
          
          <qa_contact name="HTML WG Bugzilla archive list">public-html-bugzilla</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>30969</commentid>
    <comment_count>0</comment_count>
    <who name="Simon Pieters">zcorpan</who>
    <bug_when>2010-01-12 12:14:21 +0000</bug_when>
    <thetext>http://html5.org/tools/web-apps-tracker?from=4580&amp;to=4581

text/sandboxed-html and &lt;iframe sandbox&gt; don&apos;t have the same backcompat story. Is this intentional? It seems to me that we either want a parameter for text/html or a new element.

Also: do we care about sandboxed XHTML or SVG?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>31061</commentid>
    <comment_count>1</comment_count>
    <who name="Adam Barth">w3c</who>
    <bug_when>2010-01-15 00:32:12 +0000</bug_when>
    <thetext>The back-compat story for text/sandboxed-html is that the media type triggers a download in legacy UAs, which is safe.

@sandbox purposefully defaults to open in old UAs.  That&apos;s so that folks can deploy @sandbox for defense in depth on existing web properties.

By combining the two, you can get a fail-safe behavior in old UAs for @sandbox.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>31879</commentid>
    <comment_count>2</comment_count>
    <who name="Ian &apos;Hixie&apos; Hickson">ian</who>
    <bug_when>2010-02-13 04:01:53 +0000</bug_when>
    <thetext>EDITOR&apos;S RESPONSE: This is an Editor&apos;s Response to your comment. If you are satisfied with this response, please change the state of this bug to CLOSED. If you have additional information and would like the editor to reconsider, please reopen this bug. If you would like to escalate the issue to the full HTML Working Group, please add the TrackerRequest keyword to this bug, and suggest title and text for the tracker issue; or you may create a tracker issue yourself, if you are able to do so. For more details, see this document:
   http://dev.w3.org/html5/decision-policy/decision-policy.html

Status: Rejected
Change Description: no spec change
Rationale: What Adam said.

I have no opinion on whether XML should be sandboxed; that seems out of scope for this group. (If the XML or SVG groups want HTML5 to define a sandboxed type for them, I&apos;m happy to oblige, of course. I just don&apos;t want to step on toes when it&apos;s not necessary for getting interop on existing features.)</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>