ISSUE-110 POST triggered via JavaScript

http://www.w3.org/2006/WSC/track/issues/110

We need to resolve this for xit. The proposal on the table, from:

http://lists.w3.org/Archives/Public/public-wsc-wg/2007Nov/0105.html

is:

Websites MUST NOT send sensitive data, like login information and credit 
card information, using automatic Javascript actions, unless the action is 
triggered by a positive indication from the user that the transmission of 
the data for the indicated purpose is acceptable.

You can expect discussion and a straw poll at a meeting coming soon to 
you. I encourage all of you to be proactive and do what you can to discuss 
in email ahead of time. 

Received on Friday, 28 March 2008 17:38:47 UTC