03:21 | <Maxim Vaarwel> | zcorpan: sorry to bother you, as far as I know, you seem to have written a part about HTML parsing. Could you give me an answer? |
07:55 | <zcorpan> | annevk: Does the "settings" button in https://github.com/orgs/whatwg/teams/html-triage work for you? I tested in 3 browsers and it does nothing. No error in the console |
07:56 | <zcorpan> | Hmm the settings tab works though, ok |
08:23 | <smaug> | Yoav Weiss: so noopener-allow-popups would be used on the opener side and make all the newly opened windows opened basically with noopener? Or am I misunderstanding this? |
08:24 | <smaug> | (in the pr I don't quite understand "maintain its opener relationship with them" - who maintains opener, when we just cut opener relationship ) |
08:58 | <Yoav Weiss> | smaug: If the header is used by a document, its openers would lose the ability to script it, but it would still have the ability to open other same-origin documents and script them |
08:58 | <Yoav Weiss> | smaug: does that clarify things? I'll reexamine the language I used there to try and make it clearer |
08:59 | <Yoav Weiss> | I also added an explainer https://gist.github.com/yoavweiss/c7b61e97e6f8d207be619f87ab96ead5 |
09:02 | <smaug> | Aha, it is the opened page using the header, not opener |
09:03 | <Yoav Weiss> | yup |
09:06 | <zcorpan> | document.write can insert stuff into the input stream |
09:15 | <Maxim Vaarwel> | It's clear. I ask why it talks about relative and not absolute offset. Can you provide an example that can might break logic if it will be an absolute offset? |
10:32 | <smaug> | which makes "noopener" quite confusing, when there can be plenty of other references too if the newly loaded page isn't the first one in the window |
10:35 | <zcorpan> | I don't know if an absolute offset breaks anything |
10:44 | <Maxim Vaarwel> | I don't know if an absolute offset breaks anything |
11:19 | <annevk> | smaug: I don't think that's true? Assuming the newly loaded page is the one with the new value. COOP can guarantee nobody has a reference to you, by literally creating a new browsing context and such. |
13:12 | <smaug> | annevk: I mean the terminology. It is not about opener, but about having a new top level thingie which no one can refer to |
13:18 | <annevk> | smaug: it's a new thingie without an opener? noopener, if you will :p |
13:19 | <annevk> | I find noopener clearer than omit, but maybe there's something even better |
13:27 | <smaug> | I must be confused. This is about opening a new same origin window (or loading a new page to existing window), and we want that nothing from outside has references to it, right? |
14:37 | <Yoav Weiss> | Yeah, that's correct. I'm fine with renaming to something better, if you have an ideas |
14:38 | <Yoav Weiss> | (although "nothing from outside" doesn't currently include e.g. an iframe parent) |
14:38 | <Yoav Weiss> | The current scope is really about the opener |