Allow INCLUDE / EXCLUDE elements to contain abs uri.

VERIFIED WONTFIX

Status

()

Core
HTML: Parser
VERIFIED WONTFIX
16 years ago
16 years ago

People

(Reporter: harishd, Assigned: harishd)

Tracking

({compat})

Trunk
x86
Windows 2000
compat
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Assignee)

Description

16 years ago
Per Spec. 

"The INCLUDE and EXCLUDE elements MUST specify URI patterns relative to the root
of the DNS host to which they are applied."

To my understanding it means that INCLUDE/EXCLUDE elements should contain only
relative URIs. IE seems to allow abs URIs. So, for compatibiltiy with IE may be
we should support this.
(Assignee)

Updated

16 years ago
Admittedly, I don't know much about P3P, but this looks like the seed of a
security hole in the making (spoofing another site's privacy policy or
something--probably not an immediate risk, but ignoring this MUST seems to be
opening the door.)

Is P3P that widely deployed that we can't evangelize this?
Keywords: compat
Hmm, good point. Maybe we need to disable embedded URI support as well. IE does
not support it, and it is removed from the latest spec.

There are not that many P3P sites out there (that we know of):
http://www.w3.org/P3P/compliant_sites
(Assignee)

Comment 3

16 years ago
WONTFIX
Status: NEW → RESOLVED
Last Resolved: 16 years ago
Resolution: --- → WONTFIX

Comment 4

16 years ago
Verified.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.