225244 - onload attribute not allowed in HTML tags other then BODY and FRAMESET

Status: RESOLVED WONTFIX

(Core :: DOM: UI Events & Focus Handling, defect)

Description

[Mario Mueller]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5) Gecko/20031007 Firebird/0.7
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5) Gecko/20031007 Firebird/0.7

Mozilla execute script code of the onload() event in tags like IMG and OBJECT.
But in the (X)HTML specs, the onload attribute is only allowed for the BODY and
FRAMESET element and should ignored in other tags.

Reproducible: Always

Steps to Reproduce:



Expected Results:  
Mozilla should only execute script code in the onload attribute, if it part of a
BODY and FRAMESET element.

Comment 1

[Christian :Biesinger (don't email me, ping me on IRC)]

no need to keep this security-sensitive...

Comment 2

[Boris Zbarsky [:bzbarsky]]

Use of the onload attribute on images and scripts (and <object>) may not be in
the spec, but it's a de-facto standard.  Every single major browser supports it,
and it's widely used.

Since supporting it also doesn't violate any specs, I see no reason to restrict
support to quirks mode (in other words, I believe this is wontfix).

Comment 3

[Boris Zbarsky [:bzbarsky]]

And marking so.  Ian, WHATWG may want to standardize this if it doesn't already.

Comment 4

[Hixie (not reading bugmail)]

Will do. Thanks for the headsup.

Comment 5

[Hixie (not reading bugmail)]

Done.

Comment 6

[Hixie (not reading bugmail)]

In HTML5, all the event handler attributes apply to all HTML elements.