135844 - Allow INCLUDE / EXCLUDE elements to contain abs uri.

Status: VERIFIED WONTFIX

(Core :: DOM: HTML Parser, defect)

Description

[harishd]

Per Spec. 

"The INCLUDE and EXCLUDE elements MUST specify URI patterns relative to the root
of the DNS host to which they are applied."

To my understanding it means that INCLUDE/EXCLUDE elements should contain only
relative URIs. IE seems to allow abs URIs. So, for compatibiltiy with IE may be
we should support this.

Comment 1

[Christopher Hoess (gone)]

Admittedly, I don't know much about P3P, but this looks like the seed of a
security hole in the making (spoofing another site's privacy policy or
something--probably not an immediate risk, but ignoring this MUST seems to be
opening the door.)

Is P3P that widely deployed that we can't evangelize this?

Comment 2

[Heikki Toivonen (remove -bugzilla when emailing directly)]

Hmm, good point. Maybe we need to disable embedded URI support as well. IE does
not support it, and it is removed from the latest spec.

There are not that many P3P sites out there (that we know of):
http://www.w3.org/P3P/compliant_sites

Comment 3

[harishd]

WONTFIX

Comment 4

[John Unruh]

Verified.