Open mozfreddyb opened 2 years ago
Most of the above should be resolved by previous work. What's left is:
The form action is the URL of the document, when empty. Are we OK with this? Do we want to think about the case of javascript documents here? I'd prefer not to, but mentioning for posterity :)
In the meeting, we agreed that we can't help that much once the user is in a javascript:
document, given that all relative URLs in e.g., href
are similarly dangerous. We should add a note to that effect.
This is a meta bug for a couple of issues, that we need to fix elsewhere before we can resolve on our end.
protocol
property is also not properly exported. Also, theprotocol
getter steps are hairy and need to be moved into its own algorithm, and then we can refer that.form
action
case we need to invoke the URL parser ourselves. I think matching on something likejavascript:
text might not work due to encoding stuff (not entirely sure here).form action
is the URL of the document, when empty. Are we OK with this? Do we want to think about the case ofjavascript
documents here? I'd prefer not to, but mentioning for posterity :)