Re: Intent to unship: javascript: execution outside navigation contexts

2014-06-06 Thread Anne van Kesteren
On Fri, Jun 6, 2014 at 4:33 PM, Boris Zbarsky wrote: > I'm planning to remove this sandbox stuff from javascript:. Either it'll be > running in a navigation context (toplevel window, iframe, data="javascript:">) or it won't run at all. And return the equivalent of a network error? Sounds great

Intent to unship: javascript: execution outside navigation contexts

2014-06-06 Thread Boris Zbarsky
Currently we support things like , as well as and @import(url("javascript:stuff")). What these do is run the script in a sandbox and then if it returns a value other than undefined treat that value as data for the load. I believe at this point we're the only UA that does this, and it causes