Options:
- # Session Start: Wed Jan 23 00:00:00 2008
- # Session Ident: #whatwg
- # [00:00] * Joins: zcorpan_ (n=zcorpan@c-cb21e353.1451-1-64736c12.cust.bredbandsbolaget.se)
- # [00:02] <annevk> (got another e-mail from him saying his friend pointed out those were CSS3 features)
- # [00:02] <jacobolus> annevk: is http://dev.w3.org/2006/waf/access-control/ already implemented by opera?
- # [00:03] <annevk> no
- # [00:03] <annevk> hopefully in due course
- # [00:04] <jacobolus> so only upcoming mozilla browsers have it so far?
- # [00:05] <annevk> othermaciej, the WebKit blog could say that you don't plan to support this in WebKit
- # [00:06] <annevk> jacobolus, yeah, and they have bugs :)
- # [00:06] <annevk> (and the spec is still changing slightly now and then :-()
- # [00:08] <zcorpan_> Philip`: ie7 skips PIs that start with "<?xml " (last being U+0020)... and then you have the funny > in quotes parsing
- # [00:08] <zcorpan_> <?xml ">
- # [00:08] <zcorpan_> <?xml ">">
- # [00:11] <Philip`> where "funny > in quotes parsing" means
- # [00:11] <Philip`> (?xi) <\?xml [ ] [^>\s]* ( ( \s+ | "[^\"]*" | '[^']*' ) [^>\s]* )* >
- # [00:11] <Philip`> ?
- # [00:11] <Philip`> Oops
- # [00:11] <Philip`> (?xi) <\?xml [ ] [^>\s]* ( ( \s+ | "[^"]*" | '[^']*' ) [^>\s]* )* >
- # [00:12] <Philip`> (That's what it seems to do for <!doctype>, and <?xml > looks about the same)
- # [00:13] <zcorpan_> well, not sure. ie reparses if you hit an unexpected EOF
- # [00:13] <zcorpan_> so <?xml "> might be equivalent to <?xml ">
- # [00:13] <othermaciej> vote up HTML5 on reddit: http://reddit.com/r/programming
- # [00:14] <Philip`> Is it possible to get an unexpected EOF inside the <?xml..., while still having a doctype and some actual content in your page?
- # [00:15] <zcorpan_> possible, yes. likely? no
- # [00:16] <Philip`> Hmm, I think I'll be happy enough to ignore the EOF reparsing case :-)
- # [00:16] * Quits: doublec (n=doublec@li5-223.members.linode.com) ("Terminated with extreme prejudice - dircproxy 1.0.5")
- # [00:16] <zcorpan_> sounds reasonable :)
- # [00:17] <annevk> roc, nice posts btw
- # [00:17] <annevk> I should probably do one with a list of arguments too :)
- # [00:18] * Joins: doublec (n=doublec@202.0.36.64)
- # [00:22] <zcorpan_> perhaps we should try to make them use an attribute on <html> instead of a meta
- # [00:22] <Philip`> That would be invalid HTML4
- # [00:23] <zcorpan_> there's a version='' attribute
- # [00:24] <Philip`> Not in Strict
- # [00:25] <zcorpan_> hmm, you're right
- # [00:25] * Quits: billmason (n=billmaso@ip129.unival.com) (".")
- # [00:26] <Philip`> (I'm only right because I looked it up to check :-) )
- # [00:33] * Quits: roc (n=roc@121-72-5-117.dsl.telstraclear.net)
- # [00:35] * Quits: jwalden (n=waldo@STRATTON-NINETY.MIT.EDU) (Remote closed the connection)
- # [00:42] * Parts: zcorpan_ (n=zcorpan@c-cb21e353.1451-1-64736c12.cust.bredbandsbolaget.se)
- # [00:42] * Quits: aroben (n=aroben@unaffiliated/aroben)
- # [00:42] * Joins: zcorpan_ (n=zcorpan@c-cb21e353.1451-1-64736c12.cust.bredbandsbolaget.se)
- # [00:42] * Quits: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no) ("This computer has gone to sleep")
- # [00:43] * Joins: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no)
- # [00:47] * Quits: grimboy (n=grimboy@78-105-162-250.zone3.bethere.co.uk) (Read error: 110 (Connection timed out))
- # [00:49] * eseidel___ is now known as eseidel_
- # [00:55] * Joins: jruderman (n=jruderma@guest-226.mountainview.mozilla.com)
- # [00:56] * Joins: roc (n=roc@202.0.36.64)
- # [01:02] * Joins: jwalden (n=waldo@STRATTON-NINETY.MIT.EDU)
- # [01:10] * Quits: jruderman (n=jruderma@guest-226.mountainview.mozilla.com)
- # [01:12] * Quits: zcorpan_ (n=zcorpan@c-cb21e353.1451-1-64736c12.cust.bredbandsbolaget.se) (Read error: 110 (Connection timed out))
- # [01:15] * Joins: zcorpan_ (n=zcorpan@c-cb21e353.1451-1-64736c12.cust.bredbandsbolaget.se)
- # [01:22] * Quits: gavins (n=gavin@firefox/developer/gavin)
- # [01:23] * Quits: cgriego (n=cgriego@216.138.69.206)
- # [01:25] * Joins: jruderman (n=jruderma@guest-226.mountainview.mozilla.com)
- # [01:27] * Joins: csarven- (n=nevrasc@modemcable130.251-202-24.mc.videotron.ca)
- # [01:28] <jacobolus> ooh, this one is fun: http://ejohn.org/blog/meta-madness/
- # [01:29] <hober> yup
- # [01:30] <jacobolus> it's a fun day to be Chris Wilson
- # [01:30] <hober> fsvo fun
- # [01:31] * Joins: gavins (n=gavin@firefox/developer/gavin)
- # [01:32] * gavins is now known as gavin_
- # [01:35] * Joins: dglazkov (n=dglazkov@adsl-074-229-248-021.sip.bhm.bellsouth.net)
- # [01:54] * Joins: webben (n=benh@dip5-fw.corp.ukl.yahoo.com)
- # [01:54] <zcorpan_> Hixie: have you confirmed your theory about http://ln.hixie.ch/?start=1190803943&count=1 ? :)
- # [01:57] * Quits: hober (n=ted@unaffiliated/hober) ("ERC Version 5.3 (devel) (IRC client for Emacs)")
- # [02:04] * Quits: tndH (i=Rob@87.102.8.113) ("ChatZilla 0.9.80-rdmsoft [XULRunner 1.8.0.9/2006120508]")
- # [02:10] * Quits: hdh (n=hdh@58.187.91.226) ("Leaving.")
- # [02:19] * Joins: hdh (n=hdh@58.187.91.226)
- # [02:37] * Quits: webben (n=benh@dip5-fw.corp.ukl.yahoo.com)
- # [02:39] <Hixie> zcorpan_: yeah, most people seem to use the tip line
- # [02:43] <Philip`> I really should get a blog, just so I can put invalid UTF-8 in its title and try trackbacking people who use XHTML
- # [02:45] <Hixie> heh
- # [02:49] <jacobolus> haha
- # [02:51] <othermaciej> Philip`: you're mean
- # [02:52] <othermaciej> jacobolus: Microsoft is getting more support for their move than I would have expected
- # [02:53] <jacobolus> othermaciej: the comments everywhere seem overwhelmingly negative to me
- # [02:53] <othermaciej> jacobolus: they got some positive remarks from big shot web standards people like Eric Meyer
- # [02:53] <othermaciej> and some supportive comments from web developers
- # [02:53] <othermaciej> I do see some negativity as well
- # [02:54] <othermaciej> though much of it from Mozilla-affiliated bloggers
- # [02:54] <jacobolus> yeah, and Zeldman
- # [02:55] <jacobolus> I really don't think Meyer et al. have done a great job explaining their 180 on the question though
- # [02:55] <Hixie> i didn't understand eric's article
- # [02:55] <Hixie> it seemed uncharacteristically rambly
- # [02:55] <othermaciej> I was unable to follow Eric's reasoning
- # [02:55] <othermaciej> I do think arguments could be made for Microsoft's choice
- # [02:55] <othermaciej> I don't know if they have been expounded that well
- # [02:56] <jacobolus> I think mostly that those arguments underestimate the benefits of getting browsers on the same page
- # [02:56] * hdh doesn't get the post's graphics
- # [02:57] <Hixie> the strange thing about this move is that it would make a lot of sense if they had 95% of the market and wanted to block competition
- # [02:57] <jacobolus> which is odd because the same people have spent years explaining the other side
- # [02:57] <Hixie> but in their position, bleeding market share, it actually hurts them
- # [02:57] <othermaciej> Hixie: so it's 5 years late?
- # [02:58] <Hixie> and it could be near-fatal if they ever get to low enough numbers that they are no longer the leading browser
- # [02:58] <Hixie> othermaciej: yes
- # [02:58] <jacobolus> othermaciej: I guess the main thing is I don't see the arguments working out at all for public-facing websites
- # [02:58] <hdh> does he mean to say a) it's like cc, numbered, documented and b) doesn't affect other browsers like "like Gecko"?
- # [02:58] <jacobolus> where any kind of x-browser compat is desired whatsoever
- # [02:59] <othermaciej> jacobolus: for public-facing web sites that are actively maintained, they'd probably want to either upgrade the switch for every IE release, or never upgrade it and be stuck in IE7 mode forever
- # [02:59] <othermaciej> or something
- # [02:59] <jacobolus> the idea that this new switch will allow microsoft to do a better job innovating seems completely ludicrous
- # [03:00] <othermaciej> I don't think they are interested in innovating on top of standards-based web technologies
- # [03:00] <othermaciej> so it doesn't much matter
- # [03:01] <jacobolus> sorry, i mean bug fixing: “This actually makes browser vendors more susceptible to pressure to fix their bugs, and less fearful of doing so.”
- # [03:01] <jacobolus> I just don't see that increased pressure coming out of this
- # [03:02] <othermaciej> I don't think it increases pressure
- # [03:02] <othermaciej> it somewhat decreases reasons *not* to fix bugs
- # [03:03] <othermaciej> but also decreases the web-wide benefit of fixing bugs
- # [03:03] * Quits: roc (n=roc@202.0.36.64) (Read error: 104 (Connection reset by peer))
- # [03:03] <jacobolus> someone should start some sort of betting pool about percentage of pages which use the new meta tag within 6 months of IE 8 being out
- # [03:03] <jacobolus> assuming they don't alter their plans between now and then
- # [03:04] <Philip`> Percentage of which finite set of pages?
- # [03:04] <othermaciej> probably fewer than the percentage of users using it
- # [03:04] <othermaciej> (using IE8 that is)
- # [03:04] * Joins: roc (n=roc@202.0.36.64)
- # [03:04] <jacobolus> Philip`: I dunno… I'm mostly joking :)
- # [03:05] <Philip`> Only "mostly"? :-)
- # [03:05] <jacobolus> well, in the sense that I don't actually plan to make any bets, but would be interested in seeing the studies about adoption
- # [03:06] <Philip`> I'd just make a CGI script which produces an infinite number of pages using the meta tag
- # [03:06] * Quits: doublec (n=doublec@202.0.36.64) ("Leaving")
- # [03:07] <jacobolus> and given that there are already infinitely many without, it becomes impossible to compare?
- # [03:09] <Philip`> If someone else has an infinite set of pages without the meta tag, where each is identified by some URL µ, I'll make a CGI script which you call like 'exciting.cgi?id=n;w=µ' for any positive integer n, and therefore there'll be infinitely many more pages with my meta tag than there are others without
- # [03:10] <Philip`> and you can't argue with maths!
- # [03:11] <roc> sorry
- # [03:11] <roc> those sets are the same size
- # [03:12] <Philip`> Hmph
- # [03:12] * Quits: zcorpan_ (n=zcorpan@c-cb21e353.1451-1-64736c12.cust.bredbandsbolaget.se) (Read error: 110 (Connection timed out))
- # [03:13] <Philip`> How about I have 'exciting2.cgi?ids=a,b,c,...' where you pass a comma-separated set of URLs, for each member of the power set of URLs
- # [03:14] <Philip`> (Is there any RFC that requires URLs to be of finite length?)
- # [03:17] <roc> as long as URLs are of finite length, you lose
- # [03:18] * Quits: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net) (Read error: 104 (Connection reset by peer))
- # [03:18] <Hixie> not really, a large enough number is all you really need
- # [03:18] * Joins: bloo2 (n=brian@c-76-126-109-10.hsd1.ca.comcast.net)
- # [03:18] <Hixie> assuming you're trying to bias a result
- # [03:18] <Hixie> bloo2, meet Philip`
- # [03:18] <Hixie> Philip`, meet bloo2
- # [03:18] <Hixie> you have both worked on studies of the Web
- # [03:19] * Joins: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [03:19] <Hixie> markup and that kind of thing
- # [03:19] <bloo2> hi philip 8-}
- # [03:19] <jacobolus> Philip`: wait a second there, both are countably infinite
- # [03:19] <jacobolus> Philip`: if you can make an uncountable set of pages, you can certainly win the bet though
- # [03:19] <Hixie> aren't URIs countable by definition?
- # [03:19] <Hixie> since they're bit strings
- # [03:20] <jacobolus> Hixie: that's why making an uncountable set of them is damn impressive
- # [03:20] <roc> yes
- # [03:20] <Hixie> ok, just checking
- # [03:20] <roc> Philip` is going to argue that infinite URIs are allowed by the spec
- # [03:20] <Philip`> bloo2: Good morning
- # [03:20] <jacobolus> lol
- # [03:20] <Hixie> i stick by my original point that if you're just trying to bias a sample, though, you just need a large number of uris, not an infinite number
- # [03:20] <Hixie> but i wasn't here for the start of the discussion, so...
- # [03:21] <Philip`> If you're trying to bias a sample, the best thing to do is be the person who picks the sample
- # [03:21] <Hixie> indeed
- # [03:22] <Hixie> my prices start at $1000.
- # [03:22] <Hixie> depending on how much of a skew you want.
- # [03:22] <bloo2> philip`: Hixie had mentioned you'd done some work in the area recently, but I hadn't followed up. Pleased to meet you (hrm. Must register to send a prv msg...have to look in to that)
- # [03:23] <jacobolus> Hixie: the start of it was my curious musing about the adoption of IE's new meta tag, after IE8 has been on the market a few months, plus an apparently ill-advised reference to betting :)
- # [03:23] <Hixie> hah
- # [03:24] <jacobolus> Philip`: a better bet might be about how whether microsoft.com uses their new tag ;)
- # [03:24] <Philip`> bloo2: Indeed - I did some stuff like http://canvex.lazyilluminati.com/survey/2007-07-17/analyse.cgi/index a while ago, and looked at more/different things recently
- # [03:25] <Philip`> jacobolus: Which part of microsoft.com? :-)
- # [03:25] <jacobolus> but I still wouldn't put real money on it :)
- # [03:25] <jacobolus> the front page?
- # [03:25] <jacobolus> any part of it whatsoever?
- # [03:25] <Philip`> (It was msdn.microsoft.com that originally made me switch from IE to Firefox, because I wanted to look up some documentation but it kept freezing and crashing in IE)
- # [03:26] <Philip`> jacobolus: I bet at least one part will have it, since they'll give examples in the documentation
- # [03:27] <jacobolus> heh
- # [03:27] <jacobolus> do they give examples as complete pages?
- # [03:28] <Philip`> Er, I'd guess so, but I don't actually know
- # [03:28] <bloo2> philip`: (question about the research) what is "Duplicate attribute names"?
- # [03:28] <jacobolus> anyway, gotta run. have fun with the rest of standards flamewar day, everyone
- # [03:29] * Quits: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [03:29] * bloo2 considered doing a 6 month metric test of IE's new META syntax to see if there is any uptake.
- # [03:29] <Philip`> bloo2: That's when an element has >= 2 attributes with the same name
- # [03:29] <bloo2> philip`: interesting. I hadn't thought of that one before. 8-}
- # [03:30] <Philip`> (Since it's only counting the number of pages with duplicates, it doesn't matter if it's 2 or 3 etc)
- # [03:30] <Philip`> bloo2: I was mostly looking for duplicate style attributes, since that potentially has to be handled specially for compatibility with existing content
- # [03:31] <jwalden> https://bugzilla.mozilla.org/show_bug.cgi?id=postMessage
- # [03:31] <Philip`> (but it looks like it's not a huge problem in practice)
- # [03:31] <jwalden> ^ this has a reasonable chance of being in Firefox 3
- # [03:31] <jwalden> amazingly enough
- # [03:31] * bloo2 is now known as bloo
- # [03:31] * gavin would be interested in seeing the uptake of the new meta tag before IE8 is released
- # [03:32] <Philip`> (That data came from an ugly slow C++ / Perl mixture with various problems that cause things like "u000D" to appear in the output - I've switched to a nicer faster Java approach now)
- # [03:33] * bloo works on trying to find an open nick
- # [03:34] * bloo is now known as blooberry
- # [03:35] <Philip`> gavin: http://www.cl.cam.ac.uk/~pjt47/misc/attributes.html and scroll down to "meta http-equiv": uptake was 0% about a month ago, so there's one data point already
- # [03:35] <gavin_> heh
- # [03:36] <blooberry> philip`: I found the same thing today from my research of the full dmoz set. 8-} We can consider any search before today a good "starting point" I think
- # [03:44] * Quits: Yudai (n=Yudai@pddc472.tokyte00.ap.so-net.ne.jp) (Read error: 110 (Connection timed out))
- # [03:45] * Joins: Yudai (n=Yudai@p8029bb.tokyte00.ap.so-net.ne.jp)
- # [03:53] * Quits: roc (n=roc@202.0.36.64)
- # [03:57] * jruderman wonders whether hixie plans to put "X-UA-Compatible" into acid2 or acid3
- # [03:57] <Hixie> hahahaha no.
- # [03:58] <eseidel_> Hixie: I assume you saw the security bug...
- # [03:58] <eseidel_> about data:
- # [03:59] <eseidel_> and Acid3
- # [03:59] <Hixie> haven't looked at bugmail yet
- # [04:01] <jruderman> is IE8's X-UA-Compatible really "render this exactly as IE7 would" or is it a limited number of quirks? in particular, say IE8 adds support for text-shadow; will you have to use X-UA-Compatible for text-shadow to work?
- # [04:03] <Hixie> IE7's quirks mode is "render this exactly as IE5.5 would"
- # [04:03] <Hixie> i would expect the same to apply
- # [04:03] <Hixie> in particular, i'd expect new features not to be supported
- # [04:03] <Hixie> just like they aren't in the current fewer-quirks quirks mode
- # [04:06] * Quits: eseidel_ (n=eseidel@nat/google/x-d6ffedb4b8e23241)
- # [04:06] <jruderman> ok
- # [04:08] * Quits: dbaron_ (n=dbaron@corp-241.mountainview.mozilla.com) ("8403864 bytes have been tenured, next gc will be global.")
- # [04:11] * Quits: csarven (n=nevrasc@on-irc.csarven.ca) (Read error: 104 (Connection reset by peer))
- # [04:23] * Joins: weinig (n=weinig@nat/apple/x-0477a4e24eb8dab5)
- # [04:23] * Quits: dglazkov (n=dglazkov@adsl-074-229-248-021.sip.bhm.bellsouth.net)
- # [04:27] * MacDomeOut is now known as MacDome
- # [04:31] * Quits: jwalden (n=waldo@STRATTON-NINETY.MIT.EDU) (Remote closed the connection)
- # [04:31] * Quits: MikeSmith (n=MikeSmit@58.157.21.205) ("Less talk, more pimp walk.")
- # [04:33] <othermaciej> Hixie: is there any info technically on whether IE7 actually has two separate layout engines, or just one with a bunch of conditional quirks?
- # [04:35] * Joins: dglazkov (n=dglazkov@adsl-074-229-248-021.sip.bhm.bellsouth.net)
- # [04:45] * Joins: dolphinling (n=chatzill@132.198.241.207)
- # [04:50] * Joins: roc (n=roc@121-72-0-219.dsl.telstraclear.net)
- # [04:52] * Joins: MikeSmith (n=MikeSmit@EM117-55-69-22.pool.emnet.ne.jp)
- # [04:52] * Quits: MikeSmith (n=MikeSmit@EM117-55-69-22.pool.emnet.ne.jp) (Read error: 104 (Connection reset by peer))
- # [04:57] * Joins: doublec (n=doublec@202.0.36.64)
- # [05:06] * Quits: dglazkov (n=dglazkov@adsl-074-229-248-021.sip.bhm.bellsouth.net)
- # [05:17] * Parts: doublec (n=doublec@202.0.36.64) ("Leaving")
- # [05:24] * Parts: hdh (n=hdh@58.187.91.226) ("Konversation terminated!")
- # [06:09] * Joins: MikeSmith (n=MikeSmit@dhcp-246-2.mag.keio.ac.jp)
- # [06:11] * Quits: csarven- (n=nevrasc@modemcable130.251-202-24.mc.videotron.ca) ("http://www.csarven.ca/")
- # [06:18] <jruderman> othermaciej: http://ejohn.org/blog/meta-madness/#comment-296861 ?
- # [06:19] <jruderman> "I'll detail more about the Javascript solution in the future - the short answer is that it's not two engines, it's two modes of a single engine; we can, in fact, work across boundaries like that."
- # [06:31] * Quits: jruderman (n=jruderma@guest-226.mountainview.mozilla.com)
- # [06:36] <othermaciej> jruderman: can't tell if that's referring to the JavaScript engine or the whole rendering engine
- # [06:43] * Quits: weinig (n=weinig@nat/apple/x-0477a4e24eb8dab5)
- # [06:44] <roc> me neither but it sounds more like the JS engine
- # [06:44] <gavin_> when I read it I assumed that his "it" refers to the overall solution
- # [06:45] <roc> we'll see
- # [06:46] <othermaciej> I assume some chunk of code has to be duplicated to totally freeze all bugs
- # [06:46] <othermaciej> unless they are super anal about conditionalizing every single code change
- # [06:46] <othermaciej> in which case I feel even more sorry for them
- # [06:58] * Quits: iratsu (n=iratsu@modemcable175.231-59-74.mc.videotron.ca) (Read error: 113 (No route to host))
- # [07:00] <othermaciej> wow, there are a lot of blog posts about the IE version thing
- # [07:01] * Joins: weinig (n=weinig@c-71-198-176-23.hsd1.ca.comcast.net)
- # [07:09] <roc> othermaciej: yeah
- # [07:09] <roc> othermaciej: shipping multiple engines sucks, but weaving them together in your source code must suck even more
- # [07:11] <roc> and the first time you want to rearchitect your code in a substantial way, you have to fork anyway
- # [07:11] * Joins: doublec (n=Chris_Do@203-211-108-171.ue.woosh.co.nz)
- # [07:12] * Parts: doublec (n=Chris_Do@203-211-108-171.ue.woosh.co.nz)
- # [07:26] * Quits: roc (n=roc@121-72-0-219.dsl.telstraclear.net)
- # [07:26] * Joins: jruderman (n=jruderma@c-67-180-15-227.hsd1.ca.comcast.net)
- # [07:43] * Joins: maikmerten (n=merten@ls5laptop14.cs.uni-dortmund.de)
- # [08:19] * Quits: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no) ("Leaving")
- # [08:19] * Joins: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no)
- # [08:20] <MikeSmith> kind of amazed to see so much attention about a change related to a product that hasn't even shipped yet
- # [08:21] <MikeSmith> and that nobody knows when it will actually ship
- # [08:22] <MikeSmith> the option remains of them not actually implementing this
- # [08:22] <MikeSmith> it's not like just because they have announced it preemptively, it's now written in stone
- # [08:23] <MikeSmith> I'm a bit confused about why they did go ahead and announce it already
- # [08:23] <MikeSmith> the timing -- what benefit it was to them to do so now
- # [08:24] <MikeSmith> worries that word about it would get leaked early?
- # [08:31] <othermaciej> information is good
- # [08:31] <othermaciej> I would not want to discourage them
- # [08:36] <Hixie> othermaciej: i don't know exactly what IE7 is like inside, but it certainly seems to have two engines, as they don't even, e.g., support any new features in quirks mode
- # [08:37] <othermaciej> it could just mean every change is bracketed with an if statement
- # [08:37] * othermaciej shrugs
- # [08:37] <othermaciej> Hyatt seems to think IE7's quirks mode is based on conditionals, not multiple engines, but I'm not sure how he would know
- # [08:41] <Hixie> yeah but god, can you imagine that?
- # [08:41] <Hixie> the code would suck so bad
- # [08:42] <Hixie> and as roc said, what if you rearchitect something? like their removal of hasLayout
- # [08:48] <Hixie> i mean, if you want to change something like your class hierarchy, which they well have to for what they've done in IE8...
- # [08:54] <othermaciej> at some point the whole engine has to be an if statement
- # [08:54] <othermaciej> roc, annevk: http://webkit.org/blog/155/versioning-compatibility-and-standards/
- # [08:54] <othermaciej> (since y'all suggested I should post something)
- # [09:05] <hsivonen> Aaron Gustafson contradicts what Andy Clarke said on Anne's site: http://www.webstandards.org/2008/01/22/ie8-will-see-the-smile/
- # [09:14] <othermaciej> hsivonen: I'm slow - what's the contradiction?
- # [09:15] <hsivonen> othermaciej: whether or not the people involved were acting as individuals or as WaSP
- # [09:16] <hsivonen> annevk: aside: http://annevankesteren.nl/2008/02/ is 500
- # [09:17] <Hixie> http://www.w3.org/mid/1A373905-DEAF-429E-B358-C8A49CAD550F@yahoo-inc.com is funny, because Mark basically says that HTTP headers are "whole new way to associate policy with resources"
- # [09:17] <Hixie> which is news to me!
- # [09:19] <othermaciej> hsivonen: I don't see him claiming that this was an official WaSP project, just that Microsoft approached WaSP
- # [09:20] <hsivonen> othermaciej: oh. good point. so the exact wordings don't contradict each other, but at least I get the impression from the WaSP post that WaSP was consulted as WaSP even if it doesn't strictly say that
- # [09:25] <othermaciej> this post (also on the WaSP site) is pretty unambiguous: http://www.webstandards.org/2008/01/22/microsofts-version-targeting-proposal/
- # [09:27] <hsivonen> yeah
- # [09:35] * Quits: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no) ("This computer has gone to sleep")
- # [09:36] * Joins: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no)
- # [09:44] * Joins: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [09:52] * Joins: roc (n=roc@121-72-0-219.dsl.telstraclear.net)
- # [09:53] * Quits: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no) (Read error: 110 (Connection timed out))
- # [10:04] * Joins: mpt (n=mpt@canonical/launchpad/mpt)
- # [10:20] * Joins: ROBOd (n=robod@89.122.216.38)
- # [10:21] * MacDome is now known as MacDomeSleep
- # [10:22] <jacobolus> othermaciej: excellent statement :)
- # [10:24] <annevk> hsivonen, hmm
- # [10:25] * annevk has an idea as to what the issue is
- # [10:31] <krijnh> http://alistapart.com/comments/beyonddoctype?page=10#97
- # [10:35] <takkaria> he seems to think people don't upgrade their browsers for compatibility reasons
- # [10:35] <krijnh> For IE that's probably partly true
- # [10:35] <krijnh> And partly in IE terms means a lot of users
- # [10:36] <takkaria> I think the vast, vast majority of web browser users don't know or care
- # [10:36] <Hixie> it wouldn't be as big an issue if IE didn't have so many bugs
- # [10:36] <Hixie> this is only really an issue because IE6 became entrenched after being left unmaintained for over half a decade
- # [10:36] * Quits: MikeSmith (n=MikeSmit@dhcp-246-2.mag.keio.ac.jp) ("Less talk, more pimp walk.")
- # [10:36] <Hixie> nearly one third of the lifetime of the web
- # [10:36] * Joins: Lachy (n=Lachlan@pat-tdc.opera.com)
- # [10:37] <Hixie> it wouldn't be nearly as bad for future releases
- # [10:37] <Hixie> at least once microsoft caught up to the other browsers in terms of standards compliance
- # [10:38] <krijnh> Yeah, but IE has many bugs
- # [10:38] <krijnh> So there is an issue
- # [10:38] * Quits: Lachy (n=Lachlan@pat-tdc.opera.com) (Client Quit)
- # [10:38] * Joins: Lachy (n=Lachlan@pat-tdc.opera.com)
- # [10:41] * Hixie blogs
- # [10:41] * Joins: webben (n=benh@nat/yahoo/x-6152c313105ec2c9)
- # [10:44] <roc> othermaciej: nice, thanks!
- # [10:54] * Joins: Camaban (n=adrianle@81.133.245.5)
- # [10:57] * jgraham has only just found out that <!DOCTYPE html> and other unknown doctypes will not require the <meta> madness for the latest rendering mode
- # [10:58] <annevk> interesting
- # [10:58] <annevk> that might explain Acid2
- # [10:58] <Philip`> What does "unknown" mean?
- # [10:59] <krijnh> If "Don't break the web" would be written as "Don't break the intranets which only rely on IE6/IE7 anyway" in the last couple of days and there was no mention of 'and we hope to see it implemented in other browsers as well', I think more people would have been in favor of the meta thing :)
- # [10:59] <Camaban> would that suggest that if we wanted to use HTML4.01strict, we could use the appropriate doctype in the code, then use a conditional comment to give IE8 a 'different' doctype to trigger standards mode?
- # [11:01] <jgraham> Philip`: Apparently "unknown" means "not widely deployed"
- # [11:01] <annevk> Acid3 is testing SVG now
- # [11:01] <jgraham> But all I've read is http://blogs.msdn.com/cwilso/archive/2008/01/22/i-feel-happy-too.aspx#7202711
- # [11:02] <jgraham> (it isn't clear what will happen for IE > 8)
- # [11:03] <jgraham> given which I shouldn't have said "latest" originally...
- # [11:03] <Hixie> hm, i guess we should get major sites to use that doctype asap then
- # [11:04] <Hixie> (to force them to make it either trigger ie7 mode or "break the web" in ie8)
- # [11:04] <Hixie> (and thus discredit this nonsense some more)
- # [11:04] <annevk> Hixie, the second link in your article also points to HTML5
- # [11:05] <Hixie> oops
- # [11:05] <Philip`> I suppose they could just say everything containing "DTD HTML 4.0" and "DTD XHTML 1.0" is IE7-mode, and that would cover almost all current standards-mode doctypes
- # [11:06] <Hixie> fixed
- # [11:06] <Hixie> thanks
- # [11:06] <annevk> haven't read it yet: http://norman.walsh.name/2008/01/22/html5
- # [11:06] <annevk> (he works on XML specs and such so it might be interesting)
- # [11:07] <Hixie> read it earlier
- # [11:07] <Hixie> bed time
- # [11:07] <Hixie> nn
- # [11:09] <annevk> not so much thoughts in there yet :)
- # [11:11] * Quits: roc (n=roc@121-72-0-219.dsl.telstraclear.net) (Read error: 104 (Connection reset by peer))
- # [11:13] * Joins: roc (n=roc@121-72-0-219.dsl.telstraclear.net)
- # [11:16] <mpt> "Will they hard-code the URI?" - exactly what I was thinking last week :-)
- # [11:18] <Philip`> They wouldn't be the first browser to hard-code the Acid2 URI and do special processing on it :-)
- # [11:18] <mpt> Really?
- # [11:19] * Quits: jgraham (n=james@81-86-219-94.dsl.pipex.com) ("This computer has gone to sleep")
- # [11:19] <harri> as everybody went so crazy we once did such a hack for fun in Konqueror. just showed a screenshot.
- # [11:20] <mpt> ah
- # [11:20] <Philip`> Some version of Opera made the face wink and show a special message if you left it for a couple of minutes
- # [11:20] <Philip`> though I can no longer find any references to that...
- # [11:26] * Quits: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [11:36] <Lachy> hmm. Something weird is going on. Firefox 2.0.0.11 (Mac) is failing Acid 1 for me
- # [11:36] <Lachy> crap. It seems to be something wrong with my profile, since it works with a new default user profile
- # [11:40] <annevk> Philip`, I believe it was a mobile version that had some pretty funny gimmick
- # [11:40] * annevk made a greasemonkey script that did special processing for the test URI
- # [11:42] <othermaciej> roc: if you read *very* between the lines it casts IE in a bit of a negative light
- # [11:42] <othermaciej> roc: but I managed to jeep it diplomatic
- # [11:43] <roc> yeah, it's good
- # [11:45] <roc> I think I did too. At least, Chris Wilson left a favourable comment on my second post :-)
- # [11:45] <roc> but I really wanted him to comment on the implementation issues
- # [11:45] <roc> oh well
- # [11:46] <roc> get some sleep, it's late over there
- # [11:47] * roc realizes that this time tomorrow he'll be on CA time
- # [11:48] <roc> for a loose definition of tomorrow
- # [11:52] <annevk> hsivonen, fixed
- # [11:52] <annevk> it was some PHP oddity
- # [11:52] <annevk> header("Not Found",true,404) versus header("HTTP 1.1 404 Not Found)
- # [11:52] <annevk> the latter works
- # [11:53] <annevk> well, if you don't omit the final quote
- # [11:57] <roc> I feel a bit neglected that there isn't a WaSP-Mozilla task force
- # [11:58] <annevk> that's because IE has the most issues
- # [11:58] <annevk> i was told
- # [11:58] * Quits: maikmerten (n=merten@ls5laptop14.cs.uni-dortmund.de) ("Verlassend")
- # [12:07] * Quits: harri (n=porten@mail.frogport.com) (Read error: 110 (Connection timed out))
- # [12:07] <Lachy> Hixie, I disagree with your recommendation on your blog for authors to continue using IE7 mode.
- # [12:08] <Lachy> But everyone using IE=edge is also a bad idea. I think using IE=[large-random-number] is the best solution
- # [12:10] <Lachy> although, as I've suggested before, IE should implement it as an opt-out that can be quickly added to existing pages that need it, instead of an opt-in for new pages
- # [12:10] <krijnh> That's even more hell for authors
- # [12:11] <Lachy> krijnh, why?
- # [12:12] <krijnh> Unless they ignore conditional comments and change their UA string
- # [12:12] * Joins: vant (n=vant@p2209-ipbf4005marunouchi.tokyo.ocn.ne.jp)
- # [12:13] <krijnh> Lachy: Because I seriously don't want to go through all the sites I've built and check them in IE8.. I'd prefer adding a little thingy to _new_ stuff I make, just as I now have to add conditional comments to cater for IE6 and IE7
- # [12:13] <annevk> I think what Hixie suggested is fine
- # [12:14] <Lachy> krijnh, if MS did the right thing and *didn't* introduce this evil hack, more complicated changes may have to be made. But, if MS did things right, then you shouldn't need to make any significant changes
- # [12:15] <krijnh> Yep
- # [12:15] <krijnh> But they didn't
- # [12:15] <Lachy> krijnh, so are you saying you support MS's decision for the opt-in?
- # [12:16] <krijnh> If only they implement it, I think I can live with it
- # [12:17] <krijnh> Err, I think I have to live with it :)
- # [12:17] <Lachy> I just hope they make the HTML5 DOCTYPE equivalent to IE=edge, while still allowing the meta as an opt-out if needed
- # [12:18] <krijnh> The opt-out ?
- # [12:18] <krijnh> Perhaps they need both :)
- # [12:18] <krijnh> Ow, wait, they already do, of course ;\
- # [12:18] <annevk> <!doctype html> triggers "edge"
- # [12:18] <krijnh> Yeah
- # [12:18] <krijnh> And the meta thing with IE=7 untriggers it, right?
- # [12:18] <krijnh> Cool stuff :)
- # [12:19] <Lachy> yeah, so if you have an HTML5 page that works in IE10 (after IE adds some support for it). Then IE11 comes out and something breaks. You can quickly add the opt-out to your HTML5 page to trigger IE10 mode until a more permanent fix can be deployed
- # [12:19] <krijnh> Yeah, it's just that nobody does that
- # [12:19] <roc> annevk: do we know that for sure?
- # [12:19] <krijnh> There is no 'quickly do something to site x and be done with it'
- # [12:20] <annevk> roc, cwilso said so in comments on his blog
- # [12:20] <annevk> I'm not sure if it's a good or bad thing though
- # [12:20] <roc> it sounded a bit off the cuff
- # [12:20] <annevk> it does seem a little bit weird given that normal standards mode is not whitelist based
- # [12:21] <annevk> as in, the reason that <!doctype html> triggers standards mode in Presto, Gecko, and WebKit is that it was not part of a blacklist
- # [12:22] <Lachy> krijnh, deploying a simple opt-out to fix a bug due to a browser upgrade is faster than working out what the bug is, finding a solution that works in both new and old versions and deploying that. I didn't "ad be done with it" - the opt-out would be a quick and dirty hack that should only be used as a temporary measure
- # [12:23] <krijnh> Lachy: but that's possible right?
- # [12:24] <Lachy> why wouldn't it be possible?
- # [12:25] <krijnh> I thought you meant you wanted to them to only make it possible to opt-out
- # [12:25] <krijnh> -to
- # [12:26] <annevk> i still don't think they should do this at all
- # [12:27] <annevk> especially the infinite amount of quirks modes scares me, but given the current landscape only intranet content might get crippled and I can live with that
- # [12:28] <krijnh> As an author, I think I like it
- # [12:29] <krijnh> I'm probably the only one here not working for some UA vendor :)
- # [12:29] <Camaban> I don't and I don't like it
- # [12:29] <Camaban> it's an IE hack for people who use IE hacks
- # [12:29] <roc> I like it because I think it'll make IE development implode :-)
- # [12:29] <krijnh> Camaban: you don't use conditional comments now?
- # [12:29] <roc> (not really)
- # [12:30] <Camaban> krijnh: very very very rarely
- # [12:30] <krijnh> Yeah, but you use them
- # [12:30] <Camaban> maybe a couple of times
- # [12:31] <krijnh> If it triggers on the HTML5 doctype, I don't see a problem
- # [12:31] <Camaban> I didn't have any problems when IE7 came out, I wasn;t one of the stupid satndards based coders spewing futureproof commentary and then using IE hacks which broke with a new version
- # [12:32] <annevk> how they did IE7 was very stupid though, btw
- # [12:32] <Camaban> I don't expect to have problems when IE8 comes out, and so I just want my web sites to use the browsers latest standards mode
- # [12:32] <annevk> i blogged about that long ago
- # [12:32] <annevk> they fixed the hacks but not the underlying issues
- # [12:32] <annevk> no wonder stuff breaks
- # [12:33] <krijnh> I just want my websites to all be run by people using MOS, but they just don't
- # [12:33] <krijnh> Damn users :)
- # [12:34] <Camaban> from the moaning I saw, most of it was related to * html, and people using it to hack anything and everything for IE
- # [12:36] <annevk> * html, a > b, a + b, etc.
- # [12:36] <krijnh> Wrongly written conditional comments were probably messier
- # [12:37] <Camaban> I wouldn't place all the blame for that MS, people buying into the standards based coding idea, and then using lots of hacks like that are missing the point
- # [12:37] <Camaban> though MS take the original blame for letting things get to that state in the first place
- # [12:37] <annevk> MS could have stopped supporting conditional comments, those hacks, etc.
- # [12:38] <krijnh> You think they've tried that?
- # [12:38] <Camaban> what do you mean by stop supporting?
- # [12:39] <krijnh> Just see them as comments, like other browsers do
- # [12:39] <krijnh> They must have tried that with IE8, to see what happens
- # [12:39] <krijnh> They must have tried removing the UA string or something
- # [12:40] <annevk> i don't know
- # [12:40] <krijnh> For every thing we come up with, they prolly have 10 outsourced programmers testing it out
- # [12:40] <krijnh> And this was probably the best thing they could handle
- # [12:41] <krijnh> And now they've wrapped in something 'other UAs could implement as well'
- # [12:41] <krijnh> But if that doesn't happen, this probably the best thing for everybody
- # [12:43] <krijnh> Do other vendors forsee problems in backwards engineering this IE behavior?
- # [12:44] <roc> we don't try hard enough for IE compatibility to care
- # [12:44] <krijnh> Well, that's the biggest argument I see people make in comments
- # [12:46] <krijnh> annevk: that's the 'infinite amount of quirks modes' (and others have to implement as well) you're talking about, right?
- # [12:47] <annevk> the moment we have to start caring is when IE is in a dominant position again
- # [12:48] <krijnh> Isn't it still?
- # [12:48] <annevk> it's not dominant enough for people to stop care about the other browsers
- # [12:48] <annevk> (although sometimes it is, so it may still cause issues)
- # [12:49] <Camaban> even then, getting people to care about browsers other than IE and FF can be tricky
- # [12:51] <roc> I don't really worry about the scenario where people only care about IE
- # [12:51] <roc> we're far away from that in most of the public Web, and getting further away
- # [12:51] <roc> and if it happens, the Web is screwed in so many ways
- # [12:52] <krijnh> So what's the problem again for authors, users and other vendors?
- # [12:52] <roc> I haven't haven't the foggiest idea with IE's mobile strategy is
- # [12:52] * Joins: MikeSmith (n=MikeSmit@58.157.21.205)
- # [12:53] <roc> this approach to compatibility can only hurt them there
- # [12:53] * Joins: jwalden (n=waldo@RANDOM-THREE-O-EIGHT.MIT.EDU)
- # [12:53] <roc> I don't see them roaring back to unquestioned dominance
- # [12:54] <roc> krijnh: it's going to be confusing for authors. Down the road they'll have to know the bugs of several different versions of IE
- # [12:54] <roc> if they want to work on someone's existing content
- # [12:55] <krijnh> I can only imagine people updating their crappy IE6 quicker now.. Old stuff and intranets still work, and we authors can use shiny new features
- # [12:55] <Camaban> nad if several of us start advocating use of 'edge', it'll jsut be an issue that raises it's head everytime they release another version anyway, so doesn't resolve the issue at all
- # [12:56] <krijnh> Camaban: not if they fix and release often now
- # [12:56] <roc> it reduces the incentive to modernize dusty intranets for standards-based, cross-browser access, that's bad for vendors, users and maybe authors
- # [12:56] <roc> krijnh: well no, IE8 doesn't include an IE6 mode AFAIK
- # [12:56] <Camaban> krijnh: quite a big IF, an not something they've ever done previously
- # [12:57] <krijnh> roc: ow, damn
- # [12:57] <roc> AFAIK it's IE7 + a new IE8 mode
- # [12:58] <roc> so, IE6 quirks mode, IE7 standards mode, IE8 really-standards mode
- # [12:58] <krijnh> Camaban: I think they get it at least a little bit now
- # [12:58] <Camaban> and say people do start using IE=8 a lot, when they come to do 9, they could say "oh, there's no demand for various updates, people are using IE8 rendering anyway"
- # [12:59] <krijnh> roc: they've put a lot of effort into making sure intranets still work in IE7, no? I think the only issue for not updating a company to IE7 is the OS..
- # [12:59] <roc> it sounds like new features only get added to the very latest mode, so that might inhibit people from adding features to existing content
- # [13:00] <roc> krijnh: they did, but they talk a lot about how much pain IE7 caused their customers who had content in IE6 standards mode
- # [13:00] <roc> which didn't work in IE7
- # [13:00] <roc> companies are afraid of that
- # [13:01] <Camaban> the fact IE6 still has as much market share as it does says something
- # [13:01] <krijnh> Perhaps they slap an IE6 standards mode in IE8 as well, and just tell those companies to use IE=6 in their intranet apps, dunno :)
- # [13:01] <Camaban> difficult to make a guess as to how much of that is corporates not wanting to upgrade, but I bets there's a good number of them
- # [13:01] <krijnh> I'm pretty sure
- # [13:01] <krijnh> I've just built a voting site which is mostly used in corporate environments
- # [13:02] <krijnh> 38% IE6, 19% IE7, 9% Fx2
- # [13:02] <krijnh> Ow, and 9% IE3 - my statistics suck :p
- # [13:04] <roc> I've heard FF2 usage is up around 10% in many corporate samples, which is surprisingly high to me
- # [13:04] <roc> since we basically don't target that market at all
- # [13:05] <Camaban> roc: any idea of OS' there? could be some of that is due to corporates wiht mac's maybe?
- # [13:06] <roc> dunno, but I thought Mac share in corporations was very low
- # [13:06] <Camaban> probably
- # [13:07] * Joins: maikmerten (n=merten@ls5laptop14.cs.uni-dortmund.de)
- # [13:07] * Quits: roc (n=roc@121-72-0-219.dsl.telstraclear.net)
- # [13:07] <Camaban> I sued to work for a reasonably big magazine publisher, they ahd a fair few macs around, and FF usage was fairly high, they were a bit split between officially supporting IE and FF, but as IE/Mac was dying out quickly, they could hardly continue to enforce IE usage everywhere
- # [13:14] <gsnedders> Philip`: re: invalid UTF-8 for trackbacks: remember trackbacks have no defined character set, so it's sniffed, so it will probably be treated as either ISO-8859-1 or Windows-1851 (forgive me if that number is wrong)
- # [13:15] * Joins: roc (n=roc@121-72-0-219.dsl.telstraclear.net)
- # [13:15] * Joins: webben_ (n=benh@nat/yahoo/x-94b9edb77383c4a0)
- # [13:16] <gsnedders> Philip`: URLs are of infinite length, but IE6 at least had a limit (IIRC IE7 doesn't)
- # [13:18] <roc> technically you mean URLs are of unbounded length
- # [13:19] * Quits: webben_ (n=benh@nat/yahoo/x-94b9edb77383c4a0) (Read error: 104 (Connection reset by peer))
- # [13:19] * Joins: webben_ (n=benh@nat/yahoo/x-1a30f470e0a2a695)
- # [13:19] <roc> sending an infinite-length URL to the server takes too long :-)
- # [13:20] * Quits: roc (n=roc@121-72-0-219.dsl.telstraclear.net)
- # [13:20] <annevk> :p
- # [13:21] * Joins: grimboy (n=grimboy@78-105-162-250.zone3.bethere.co.uk)
- # [13:21] <annevk> we need infinite time to go with infinite URIs
- # [13:21] <gsnedders> well, there are infinitely long HTML documents on the real world web :P
- # [13:23] * Joins: zcorpan (n=zcorpan@pat.se.opera.com)
- # [13:30] <Dashiva> But do those documents support offsets when fetching? Otherwise you're stuck when the server goes down after a few years
- # [13:33] * Quits: webben (n=benh@nat/yahoo/x-6152c313105ec2c9) (Read error: 113 (No route to host))
- # [13:39] <zcorpan> oh, completely forgot about <ol start=6 reverse>
- # [13:39] <zcorpan> oh well
- # [13:50] * Joins: harri (n=porten@mail.frogport.com)
- # [14:28] * Joins: nickshanks (n=nickshan@home.nickshanks.com)
- # [14:32] <Philip`> gsnedders: Re: re: invalid UTF-8 for trackbacks: If it's close-enough-to-valid UTF-8 that's just forbidden by XML, then hopefully it wouldn't get sniffed as something else
- # [14:33] <Philip`> Maybe just using � would be enough to break things that do non-strict XML parsing
- # [14:35] * Quits: vant (n=vant@p2209-ipbf4005marunouchi.tokyo.ocn.ne.jp) ("Leaving...")
- # [14:42] * Joins: othermaciej_ (n=mjs@dsl081-048-145.sfo1.dsl.speakeasy.net)
- # [14:42] * Quits: othermaciej (n=mjs@dsl081-048-145.sfo1.dsl.speakeasy.net) (Read error: 104 (Connection reset by peer))
- # [14:55] * Quits: webben_ (n=benh@nat/yahoo/x-1a30f470e0a2a695) (Read error: 104 (Connection reset by peer))
- # [14:59] * Joins: webben (n=benh@nat/yahoo/x-32d0543698b0f754)
- # [15:03] <krijnh> Can't IE8 just make a guess with the Last-Modified HTTP headers each file has? :]
- # [15:05] <krijnh> Everything before X should go in IE7 compatmode/quirksmode, everything after X is in truly standards mode, unless the developer has opted out with a shiny meta
- # [15:05] <Philip`> Half of the pages on the web don't have a Last-Modified header at all
- # [15:05] <krijnh> Is that the half with no doctype either?
- # [15:06] <Philip`> I would assume server configuration is independent of served HTML content
- # [15:06] <Philip`> by which I mean, I have no idea whatsoever
- # [15:07] <krijnh> Well, other content then
- # [15:07] <Philip`> (http://http-parsing.gsnedders.com/ )
- # [15:07] <krijnh> Static files mostly have a last-modified, no?
- # [15:08] <Philip`> No idea :-)
- # [15:08] <krijnh> Well, PHP generated stuff for example doesn't have a last-modified header by default
- # [15:09] <Philip`> That would make sense
- # [15:10] <krijnh> But HTML can be ignored
- # [15:10] <Philip`> but I have no idea how to determine whether most static files have last-modified
- # [15:10] <Philip`> except by ugly things like guessing from the file extension
- # [15:10] <krijnh> Uhm
- # [15:11] <krijnh> http://http-parsing.gsnedders.com/ - fetch everything where content-type is text/css and has a last-modified
- # [15:12] <krijnh> That would be hard with embedded stylesheets though
- # [15:13] <Philip`> Not entirely sure what you mean... Follow all the <link rel=stylesheet href=...> links, assume the returned files are static, and then count last-modified?
- # [15:13] <krijnh> Yeah
- # [15:13] <Philip`> (Could do the same with <img src=...> since most images will be static)
- # [15:13] <krijnh> Yeah, but images don't change that much
- # [15:14] <krijnh> It's about the development assets
- # [15:15] <Philip`> So IE8 should download and parse the page, extract all stylesheet links, download all stylesheets, check their last-modified headers, and if they're past a certain date then switch to the fewer-bugs mode? That doesn't sound totally efficient :-)
- # [15:15] <krijnh> If the last change in the newest stylesheet or js file was in 2007 it's safe to assume IE7 compat, or something
- # [15:15] <krijnh> Yeah ;p
- # [15:16] <krijnh> Glad I'm no browser engineer :D
- # [15:16] <Philip`> I'd hate to be the web developer who makes a trivial change to one file, then discovers their whole site has collapsed in a pile of bugs, and reverts their change but still suffers from the same pile of bugs and has no idea what they did wrong :-)
- # [15:17] <krijnh> Well then
- # [15:17] <krijnh> The simple answer to my first question would be 'No, you idiot' :)
- # [15:18] <Camaban> krijnh: No, you idiot
- # [15:18] <Camaban> :)
- # [15:19] <Philip`> Okay, glad it's resolved so easily ;-)
- # [15:19] <krijnh> :P
- # [15:20] <krijnh> Meanwhile, in a channel not so far away, people are on mute because his earplug isn't working and his synthesizer tends to bother others
- # [15:23] * Quits: webben (n=benh@nat/yahoo/x-32d0543698b0f754)
- # [15:24] * Joins: csarven (n=nevrasc@on-irc.csarven.ca)
- # [15:29] <krijnh> http://krijnhoetmer.nl/stuff/html5/section-elements/ - yay, now it almost works cross browser..
- # [15:33] <MikeSmith> Hixie - for being able to directly reference the list in of doctypes that must trigger quirks mode in HTML5 UAs, it would be useful to have an ID at the beginning of the list
- # [15:34] <MikeSmith> maybe at the sentence preceding the list
- # [15:34] <MikeSmith> "Then, if the DOCTYPE token matches one of the conditions in the following list, then set the document to quirks mode:"
- # [15:35] <Philip`> krijnh: Except for Firefox :-(
- # [15:35] <krijnh> Philip`: Yeah
- # [15:36] <krijnh> But IE6, IE7, Opera 9 and Safari 3 handle it now
- # [15:36] <krijnh> How is Fx3 ?
- # [15:36] <Philip`> Still as broken as FF2, as far as I'm aware
- # [15:36] <krijnh> Hmm
- # [15:37] <krijnh> Hmm
- # [15:37] <krijnh> That's 2 times hmm
- # [15:37] <Philip`> https://bugzilla.mozilla.org/show_bug.cgi?id=311366
- # [15:37] <krijnh> Would document.createElement('abbr') enable support for <abbr> in IE6? :o
- # [15:38] <Philip`> It does
- # [15:38] <Philip`> <abbr title> tooltips work too
- # [15:38] <krijnh> Yeah, cool
- # [15:39] <krijnh> http://krijnhoetmer.nl/zooi/abbr.html
- # [15:39] <krijnh> Tee hee
- # [15:42] <krijnh> Why did no IE developer ever mention this, when people complained about IE6 not supporting <abbr> ? :| Were all their developers killed after releasing IE6 or something?
- # [15:42] * Joins: webben (n=benh@nat/yahoo/x-d3cd873e860d4c44)
- # [15:43] <Philip`> krijnh: Maybe no IE developer understands the IE engine well enough to know about such things? :-)
- # [15:43] <Philip`> It doesn't seem like an intentional feature, so the thought might have just not occurred to them
- # [15:44] * krijnh tries document.createElement('canvas') to explore other hidden IE6 features :)
- # [15:44] <Camaban> maybe no IE developer understood <abbr> so didnt know what it was meant to do :)
- # [15:45] <Philip`> Maybe they've got an entire <canvas> implementation in there and we just have to add a magical script line to enable it!
- # [15:45] <jwalden> or a CSS property
- # [15:45] <Camaban> document.createElement(godmode')
- # [15:45] <krijnh> DNKROZ :P
- # [15:45] <Philip`> krijnh: Excanvas does some searching for CANVAS and /CANVAS tags to reconstruct canvases, and that'd be much nicer if they used this method instead
- # [15:46] <krijnh> The .createElement() should be called before using the element though
- # [15:47] <Philip`> That's not really a problem since everyone puts the <script> in the <head> anyway
- # [15:48] <krijnh> Didn't Yahoo teach everybody to put the scripts at the bottom ?
- # [15:49] <Philip`> We can just unteach them
- # [15:49] <krijnh> Unteach me while you're at it :)
- # [15:49] <Philip`> And you should put the IE-parser-fixing scripts in a <![whatever it is, so that other browsers don't have the cost of downloading an extra script
- # [15:50] <Camaban> krijnh: then people discovered that if using js based analytics software (like google analytics), having the script at the bottom of the page meant you completely missed some page views, because the user clicked a link before the bottom of the page was loaded and the script was run :)
- # [15:50] <krijnh> Statistics are like bikinis anyway
- # [15:51] <krijnh> They smell, when used
- # [15:52] <Camaban> well, if you're stats aren't right because you included the srcipt at the bottom of the page, quite possibly :)
- # [15:52] <krijnh> And when you're not using stats scripts?
- # [15:53] <Camaban> well, if you're using web server logs, then you've a whole other raft of issues :)
- # [15:53] <Camaban> point being, advice these days is to put js based stats scripts at the top of the code
- # [15:53] <krijnh> Yeah, you get 9% IE3 visitors :]
- # [15:54] <krijnh> Which means you didn't update your software, even though Fx3 and Safari 3 are out
- # [15:54] <Camaban> or means something is faking it's UA :)
- # [15:54] <krijnh> Then why did the smart people at Yahoo put a silly warning in YSlow?
- # [15:55] <Camaban> probably because laoding a script early is likely to slow down the rest of the page
- # [15:55] <Camaban> especially if it's external
- # [15:55] <Camaban> swings and roundabouts
- # [15:56] <Camaban> people serious about stat sofwtare tend to accep the slow donw a bit
- # [15:56] <krijnh> So stats scripts in the head, other stuff at the bottom?
- # [15:56] <Philip`> I just write all my JavaScript code inline
- # [15:56] <Camaban> probably depends on the script, but potential, yes
- # [15:57] <Camaban> have had to put ad code at the bottom of code before because some ad servers were slow responding and casuing long delays in page load
- # [15:57] <Camaban> but might be some other cases like stats where getting them fired earlier is desirable
- # [15:58] <krijnh> http://krijnhoetmer.nl/irc-logs/xhtml/20080123#l-209 :)
- # [15:59] * Quits: othermaciej_ (n=mjs@dsl081-048-145.sfo1.dsl.speakeasy.net)
- # [15:59] <krijnh> daft - adjective, -er, -est. 1. senseless, stupid, or foolish. 2. insane; crazy. 3. Scot. merry; playful; frolicsome.
- # [16:00] <Philip`> HTML5 Editor's Daft
- # [16:00] <krijnh> :P
- # [16:04] <krijnh> If only we could see the IE7 codebase.. I wonder how they implemented <abbr>
- # [16:07] <jwalden> I don't want to know
- # [16:08] <Philip`> What does IE7 do about <abbr> in quirks?
- # [16:08] <krijnh> Nothing, just supported
- # [16:09] <krijnh> Same in IE6 in quirks mode
- # [16:09] * Joins: webben_ (n=benh@nat/yahoo/x-557fb995dadf7d78)
- # [16:11] * Joins: webben__ (n=benh@nat/yahoo/x-6a1478bba94141d6)
- # [16:13] <Philip`> Hmm, I thought people said IE7 had a frozen copy of an older engine for quirks mode; but IE7 supports quirks <abbr> like standards <abbr>, and unlike IE6 which never supports <abbr>
- # [16:13] * Joins: tndH_ (i=Rob@adsl-87-102-20-247.karoo.KCOM.COM)
- # [16:13] * tndH_ is now known as tndH
- # [16:20] * Quits: webben (n=benh@nat/yahoo/x-d3cd873e860d4c44) (Read error: 110 (Connection timed out))
- # [16:23] <zcorpan> Philip`: indeed, ie7's quirks mode is not the same as ie6's quirks mode
- # [16:23] <zcorpan> even though they said they wouldn't change anything in quirks mode
- # [16:29] <Philip`> Did they intentionally add <abbr> to IE7 quirks mode, or is it just shared code?
- # [16:29] * Quits: webben__ (n=benh@nat/yahoo/x-6a1478bba94141d6) (Read error: 113 (No route to host))
- # [16:30] * Quits: webben_ (n=benh@nat/yahoo/x-557fb995dadf7d78) (No route to host)
- # [16:37] * Joins: phsiao (n=shawn@nat/ibm/x-b6493e4abd524a2d)
- # [16:41] <zcorpan> no idea. perhaps they figured that supporting <abbr> in quirks wouldn't break anything.
- # [16:45] <krijnh> "I for one am excited about the IE-version Meta tag, as long as I can set it to IE1. That way all of my pages can look good in Safari, Firefox and Opera while looking like badly munged Geocities pages circa 1995. Hoorayl!"
- # [16:48] * Quits: tndH (i=Rob@adsl-87-102-20-247.karoo.KCOM.COM) (Read error: 110 (Connection timed out))
- # [16:49] * Joins: billmason (n=billmaso@ip129.unival.com)
- # [17:03] * Quits: mpt (n=mpt@canonical/launchpad/mpt) ("Ex-Chat")
- # [17:03] * Joins: mpt (n=mpt@nat/canonical/x-7ad61e2f59337505)
- # [17:06] * Joins: webben (n=benh@nat/yahoo/x-a321f4c6570f1166)
- # [17:08] * Quits: Lachy (n=Lachlan@pat-tdc.opera.com) ("This computer has gone to sleep")
- # [17:14] * jwalden wonders why freenode doesn't display idle time in /whois
- # [17:17] <gavin_> jwalden: it will if you do /whois nick nick rather than /whois nick
- # [17:18] <jwalden> ah, of course! how natural!
- # [17:18] * jwalden wonders why this behavior differs across servers
- # [17:19] * Joins: aroben (n=aroben@68.63.168.52)
- # [17:23] * Quits: maikmerten (n=merten@ls5laptop14.cs.uni-dortmund.de) (Remote closed the connection)
- # [17:25] <gsnedders> jwalden: Because nothing follows the spec, because the spec is totally incompatible with the real world
- # [17:25] <jwalden> I'd have expected nominal real-world compatibility
- # [17:25] <jwalden> at least on common things like /nick
- # [17:25] <jwalden> er
- # [17:26] <jwalden> /whois
- # [17:26] <gsnedders> oh, hell no. :)
- # [17:26] <annevk> "you must be new here"
- # [17:28] <gsnedders> "Please leave your sense of logic at the door, thanks!"
- # [17:29] <gsnedders> on an unrelated note, can we have a spec for feed autodiscovery that actually is usable?
- # [17:29] <Ketsuban> /whois is remarkably uncommon. Most IRCites use IRC for two things only - speaking and actions. :P
- # [17:29] * Joins: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [17:32] * Joins: SadEagle (n=maksim@cpe-69-202-89-106.twcny.res.rr.com)
- # [17:35] <SadEagle> Philip`: are non-JS comments in e.g. 2d.imageData.put.round intentional?
- # [17:37] * Joins: jacobolus1 (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [17:37] * Quits: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net) (Read error: 104 (Connection reset by peer))
- # [17:37] <Philip`> SadEagle: Urgh, no
- # [17:37] <Philip`> That's what happens when I mix JS and Python and YAML in a single source file...
- # [17:38] <SadEagle> BTW, for some reason your script doesn't work with 'real' yaml implementation..
- # [17:38] * Parts: zcorpan (n=zcorpan@pat.se.opera.com)
- # [17:38] * Philip` unindents the comments so they become YAML instead of JS
- # [17:38] * Joins: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no)
- # [17:38] <Philip`> Hmm, what's a "'real' yaml implementation"?
- # [17:40] <SadEagle> as in not 'syck' or whatever is supposed to be faster. whines about double arcto annotation or something(?)
- # [17:40] <Philip`> SadEagle: Fixed and uploaded (for .round and .clamp) - thanks
- # [17:40] <SadEagle> thanks for the testcases
- # [17:41] <SadEagle> are you planning on security testcases for getImageData?
- # [17:41] <Philip`> Oh, that's probably because I've got two &arcto
- # [17:42] <SadEagle> heh, I fail .round pretty miserably :-)
- # [17:42] <Philip`> Fixed local copy of YAML file
- # [17:43] <SadEagle> thanks.
- # [17:43] <Philip`> I should probably just duplicate all the toDataURL cases for getImageData, since I can't think of any differences
- # [17:43] * jacobolus1 is now known as jacobolus
- # [17:44] <Philip`> (If you want the YAML thing to work, just change the second "&arcto ..." line to say "*arcto" instead)
- # [17:45] <Hixie> Lachy: using IE=large-number or IE=edge are both trivial for microsoft to route around
- # [17:45] <SadEagle> BTW, do i understand correctly that the origin of image data in a canvas element should be transitive?
- # [17:46] <annevk> Philip`, in http://philip.html5.org/data/doctypes.txt what's the difference between #2, #4, and #5?
- # [17:46] <Philip`> Not sure what you mean by transitive here
- # [17:47] <Philip`> annevk: Whitespace (which was all collapsed to spaces before outputting to the .txt file)
- # [17:48] <Lachy> Hixie, but MS have to realise that if someone has gone to all the trouble of using IE=edge or large-number then they should accept that the author has taken responsibility for themselves and not screw them over
- # [17:48] <annevk> thx
- # [17:48] <jwalden> Hixie: if I have pages A and B on the same domain, and A calls a function in B which calls someWindow.postMessage, the uri of the event is B, correct?
- # [17:48] <Hixie> Philip`: (the excanvas guys know, i told them yesterday, and they immediately were like "wow, we could totally fix the <canvas>-finding code...")
- # [17:49] <Hixie> Lachy: you mean like how they should accept that the author has taken responsibility for themselves and not screw them over when they pick standards mode using a doctype?
- # [17:49] <Hixie> jwalden: iirc
- # [17:49] <Philip`> annevk: Added a comment to the file to hopefully make it clearer
- # [17:49] <SadEagle> Philip`: if you have a canvas A, that had images from domains d1 and d2 painted, and you painted from it on canvas B, d1 and d2 should be included on its list of domains, right?
- # [17:50] <Hixie> Lachy: this isn't about them accepting anything, it's about them thinking they know better about what users want as far as compat goes
- # [17:50] <jwalden> cool; the exact phrasing was "the document that the script that invoked the methods is associated with", for what it's worth
- # [17:50] <Hixie> yeah, i should make that clearer
- # [17:50] <Philip`> SadEagle: In at least Firefox, there's just a boolean "unsafe" flag per canvas, which gets set whenever you paint from a different-origin image or from an unsafe canvas
- # [17:51] <Philip`> SadEagle: which seems sensible, and I can't think of cases where it's unsafe or overly restrictive, though I know very little about security
- # [17:51] <gsnedders> I think part of the issue is the umber of sites using <!--[if IE]> without any version
- # [17:51] <gsnedders> *number
- # [17:51] <SadEagle> Philip`: yeah, I just realized that 2 sources can never be equal to 1 :-)
- # [17:52] <annevk> SadEagle, no need for domain lists, just a "safe" flag
- # [17:52] <Philip`> http://philip.html5.org/data/ccs.html
- # [17:52] <Philip`> <!--[if IE]> is quite common :-(
- # [17:52] * SadEagle won't worry too much about websites not working in IE
- # [17:52] <Philip`> (Well, 1.5%)
- # [17:52] <annevk> you need a "safe" flag on CanvasPattern, HTMLCanvasElement, and maybe HTMLImageElement depending on how you implement things
- # [17:53] <jwalden> Hixie: second: what should be the domain/uri when postMessage is called from within a window in which about:blank was initially loaded but which has been document.open|write|closed with different contents? null/"about:blank" is my guess per <http://www.whatwg.org/specs/web-apps/current-work/multipage/section-documents.html#domain>
- # [17:53] <Philip`> (or 1.5% of not-very-complex web pages - these aren't fancy application sites)
- # [17:54] <Hixie> jwalden: doesn't document.open() propagate a domain/origin into the about:blank apage?
- # [17:54] <SadEagle> annevk: thanks for reminding me of patterns.
- # [17:54] * jwalden checks
- # [17:54] <jwalden> that's the behavior of Moz right now, but I wasn't sure if it was right or not
- # [17:54] * Philip` wonders if he had a test for drawing data: onto canvas being safe
- # [17:55] <annevk> i believe so
- # [17:55] <annevk> and apart from Opera most browsers fail iirc :(
- # [17:55] <Philip`> Oh, I do
- # [17:55] <Philip`> Opera 9.2 fails, Opera 9.5 passes, Firefox fails, Safari doesn't have toDataURL
- # [17:56] <Hixie> jwalden: sorry, i'm confused. what is? about:blank, or propagating the domain?
- # [17:56] <annevk> Hixie also needs to update the spec to mention that <img src=data:...> is always "safe"
- # [17:56] <annevk> for <canvas> purposes
- # [17:56] * Joins: webben_ (n=benh@nat/yahoo/x-550e1eb1ca096652)
- # [17:57] * Quits: webben (n=benh@nat/yahoo/x-a321f4c6570f1166) (Read error: 104 (Connection reset by peer))
- # [17:57] <Hixie> send mail, everyone :-)
- # [17:57] <annevk> and that <img src=external.foo -> data:...> is not
- # [17:57] <jwalden> Hixie: sorry, Moz currently has the URI/domain of the writer (or possibly opener, I've not tested)
- # [17:57] <Hixie> jwalden: that seems reasonable to me. i expect html5 to eventually require that once i have clarified the 'origin' of documents.
- # [17:58] <jwalden> Hixie: okay; should I send an email to the list to make sure that gets put in the open() description, as it's not there now?
- # [17:58] <jwalden> (for whichever of document or window is causing this behavior, that is)
- # [17:58] <Philip`> annevk: I think the spec already requires that - data: URIs have the same origin as the document they're used in, or something like that
- # [17:58] <Philip`> (Er, things created from data: URIs have the same ...)
- # [17:59] <SadEagle> annevk: the origin of an image element is always the origin of its document, right?
- # [17:59] <Philip`> SadEagle: No, it depends on the src
- # [17:59] <annevk> SadEagle, <img src="http://external.example.org/img.gif"> in an foobar.invalid document would be an "unsafe" image
- # [18:00] <annevk> SadEagle, as it could contain information from an intranet or so
- # [18:00] <annevk> (the attack vector is that until <canvas> there was no way to read image data and therefore cross-site images were not an issue)
- # [18:01] <Hixie> jwalden: yes please
- # [18:02] <SadEagle> annevk: hmm, if you paint it on an external.example.org--owned canvas, it's safe though?
- # [18:02] <Philip`> How do you get a reference to a differently-owned canvas?
- # [18:03] <SadEagle> one can restrict domains further via JS..
- # [18:04] <SadEagle> hmm, or not. I wish I was the guy who wrote the XSS-checks infrastructure :(
- # [18:05] * Joins: webben (n=benh@nat/yahoo/x-3bfee8894cfc2739)
- # [18:06] <SadEagle> patterns aren't tied toa particular context, are they?
- # [18:06] <Philip`> They shouldn't be
- # [18:07] <Philip`> http://philip.html5.org/tests/canvas/suite/tests/2d.pattern.crosscanvas.html
- # [18:07] * jwalden is rather glad he wasn't the person who wrote the XSS-checks infrastructure
- # [18:07] <jwalden> I can armchair-critique what resulted with the best of them, however!
- # [18:08] <Philip`> If you change document.domain with JS, I've got entirely no idea what should happen :-)
- # [18:08] * SadEagle tries to think whether an unsafe bit is really enough for them, then.
- # [18:09] <SadEagle> (I think this calls for pen-and-paper... and an auditor)
- # [18:09] <Philip`> A list of domains might not be enough, since there could be some other non-image-drawing functions that make the canvas unsafe
- # [18:09] * Quits: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no) (Read error: 104 (Connection reset by peer))
- # [18:10] <Philip`> like a drawWindow etc
- # [18:10] <SadEagle> well, a pattern created from an unsafe canvas is always unsafe.. but what about images? I guess only if the images origin isn't the same as the domain of the document, or?
- # [18:11] * SadEagle notes the use of the word 'guess', and gets scared
- # [18:11] <Philip`> Comparing image origin vs document domain is what people seem to be doing
- # [18:12] * Joins: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no)
- # [18:13] <annevk> and that makes sense
- # [18:13] <annevk> document.domain doesn't really matter here afaict
- # [18:13] <SadEagle> since normal checks should prevent that?
- # [18:15] <annevk> well, if you have access to some other place because of document.domain you can extract the image data anyhow
- # [18:15] <annevk> so the only problem might be that if you compare the origin of the <canvas> on which you draw against the <img> origin which you draw upon it you might be too strict
- # [18:16] * Quits: ROBOd (n=robod@89.122.216.38) ("http://www.robodesign.ro")
- # [18:17] * Joins: ROBOd (n=robod@89.122.216.38)
- # [18:18] * Quits: webben_ (n=benh@nat/yahoo/x-550e1eb1ca096652) (Read error: 110 (Connection timed out))
- # [18:19] * Quits: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no) ("Leaving")
- # [18:22] * Quits: mpt (n=mpt@canonical/launchpad/mpt) ("Ex-Chat")
- # [18:29] * Quits: csarven (n=nevrasc@on-irc.csarven.ca) (Read error: 110 (Connection timed out))
- # [18:30] <annevk> http://www.b-list.org/weblog/2008/jan/23/legacy/
- # [18:33] * Joins: Lachy (n=Lachlan@cm-84.215.54.100.getinternet.no)
- # [18:34] * Quits: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net) (Read error: 104 (Connection reset by peer))
- # [18:35] <SadEagle> well, if they set the default the other way around, they'd be doing everyone else a huge favor, and what's their motivation for doing that?
- # [18:35] <annevk> i'm not sure they're doing themselves a favor right now
- # [18:37] * Quits: weinig (n=weinig@c-71-198-176-23.hsd1.ca.comcast.net)
- # [18:38] <Camaban> piss off IE only developers, or piss off everyone else...
- # [18:38] <SadEagle> annevk: so to double-check, the only origin of unsafety would be an image element with a mismatch of origin?
- # [18:40] <annevk> well, and <canvas> and CanvasPattern objects which have such images painted on them
- # [18:40] <SadEagle> thanks. I view that as transitivity and not origin :-)
- # [18:40] <annevk> <canvas>.drawImage(<canvas>.drawImage(unsafeimage)) -> both are unsafe
- # [18:40] <annevk> ok
- # [18:41] <annevk> hmm, so UTF-7 may not be needed after all
- # [18:41] <annevk> Philip`, got stats on usage? :)
- # [18:42] <SadEagle> And I am curious whether utf-7 or ISO 8859-5 are used less
- # [18:42] * Joins: hober (n=ted@unaffiliated/hober)
- # [18:44] <Philip`> annevk: I don't think I do, and I wouldn't have a large enough sample to get anything meaningful for things like utf-7
- # [18:45] <annevk> k
- # [18:45] * Quits: jruderman (n=jruderma@c-67-180-15-227.hsd1.ca.comcast.net)
- # [18:45] <Hixie> annevk: re our earlier conversation
- # [18:45] <Hixie> according to my data, as of july last year, the most common doctypes were:
- # [18:45] <Hixie> 1. no doctype
- # [18:46] <Hixie> 2. html,-//W3C//DTD XHTML 1.0 Transitional//EN,http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd
- # [18:46] <Hixie> 3. HTML,-//W3C//DTD HTML 4.01 Transitional//EN,(no uri)
- # [18:46] <Hixie> ...
- # [18:46] <Hixie> 6. html,-//W3C//DTD XHTML 1.0 Strict//EN,http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd
- # [18:47] <Hixie> 7. html5 doctype (no fpi or uri)
- # [18:47] * Joins: jgraham (n=james@81-86-219-94.dsl.pipex.com)
- # [18:47] <Hixie> 8. HTML,-//W3C//DTD HTML 4.01//EN,http://www.w3.org/TR/html4/strict.dtd
- # [18:47] <Hixie> 13. html,-//W3C//DTD XHTML 1.1//EN,http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd
- # [18:47] <Hixie> (skipping transationals)
- # [18:47] <annevk> 7 html5?!
- # [18:48] <Hixie> 23. HTML,-//W3C//DTD HTML 4.0//EN,(no uri)
- # [18:48] <Hixie> annevk: they might also have been parse errors, it's unclear
- # [18:48] <annevk> k
- # [18:49] <Hixie> HTML,-//W3C//DTD HTML 4.01//EN,http://www.w3.org/TR/html4/strict.dtd seems to be the most common non-transitional, non-xhtml doctype
- # [18:49] <Hixie> i guess i should use that for acid3
- # [18:49] <annevk> i'd go for 8 then
- # [18:49] <annevk> yeah
- # [18:50] * Joins: maikmerten (n=maikmert@Laba7.l.pppool.de)
- # [18:50] <Hixie> i'm surprised about #7
- # [18:50] <Hixie> how weird
- # [18:50] <Hixie> i should investigate further
- # [18:50] <Hixie> but now i have to go to a meeting. bbl.
- # [18:51] <blooberry> hixie: html5 doctype was pretty far down on my list
- # [18:53] <Philip`> Hixie: Was that using the HTML5 tokenisation algorithm to extract the doctype?
- # [18:53] <Hixie> yeah
- # [18:53] <Hixie> maybe those were all bogus doctypes
- # [18:53] <Hixie> afk
- # [18:54] <Philip`> http://philip.html5.org/data/doctypes.txt has zero <!doctype html>s
- # [18:54] <annevk> hsivonen, http://www.b-list.org/weblog/2008/jan/23/legacy/#c53749 shows that your tables are slightly confusing
- # [18:55] <Philip`> Hixie: Also, were you ignoring case when counting commonness?
- # [18:55] * Joins: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [18:57] * Joins: Richardigel (n=igel@92.226.194.241)
- # [18:58] <Philip`> Argh, I forgot case-sensitivity in my quirks/standards detector...
- # [18:59] <blooberry> philip` my list has it about 150 times (with varying case results)
- # [18:59] * Joins: roc_ (n=roc@121-72-0-219.dsl.telstraclear.net)
- # [19:00] <blooberry> philip`: Do you keep an active linkage in your research to the results, eg, if you wanted to find a particular URL in that result set, can you?
- # [19:00] <Philip`> blooberry: 150 out of how many?
- # [19:00] <blooberry> philip`: a lot. ;-} 1681088 domains
- # [19:02] <blooberry> (that number didn't count any results with no doctypes in the set. Total domains in set is ~3.2 million)
- # [19:02] <Philip`> blooberry: For e.g. doctypes, I generate a list of (uri, matched string)s, and then have a separate program to summarise the data, so I can go back and find the URIs from there
- # [19:02] <blooberry> very cool
- # [19:02] <Philip`> but also I cache all the pages I downloaded, so I can re-run the whole data-extraction program without any network activity
- # [19:02] <Philip`> (so it only takes about thirty seconds for 16K pages)
- # [19:03] <blooberry> also useful...what is the disk hit on that? (how much space does it cost)
- # [19:03] <blooberry> whoa. Very nice. 8-}
- # [19:03] <Philip`> 400MB for the 16K HTML pages (plus HTTP headers, plus serialised Java exceptions)
- # [19:03] <Philip`> It's only 14MB for the extracted doctype data
- # [19:04] <blooberry> any external object references analyzed or saved?
- # [19:05] * Joins: dbaron (n=dbaron@guest-226.mountainview.mozilla.com)
- # [19:06] * Quits: Richardigel (n=igel@92.226.194.241)
- # [19:06] <blooberry> philip`: oh...I've seen you reference statistics now you have generated from I think at least 3 domains. Do you have any central place where you summarize or link to all the far-flung pieces?
- # [19:06] <Philip`> I've checked external references in the past, for e.g. http://canvex.lazyilluminati.com/misc/stats/scripttypes2.html
- # [19:07] <blooberry> philip`: hmm. I think that makes it 4 domains now. ;-}
- # [19:07] <Philip`> I don't have any central place at the moment, and I keep changing my mind about where I want to bother saving stuff :-)
- # [19:07] <blooberry> 8-D
- # [19:07] <Philip`> I've been meaning to make a list of all the stuff I've done, so I could do that soon if you're interested in finding the various bits
- # [19:08] <blooberry> do you have some sort of list of all the things you have covered? Or is it all in your head? ah, ok.
- # [19:08] * Parts: Camaban (n=adrianle@81.133.245.5)
- # [19:08] <Philip`> It's not in my head - I just have to search through all the servers to find anything
- # [19:09] <Philip`> Some of it is only exists in mailing list posts, too...
- # [19:09] <Philip`> s/ is//
- # [19:13] <annevk> http://www.computable.nl/nieuws.jsp?id=2319711 talks about HTML5 making an initial step to the Semantic Web :)
- # [19:13] * Joins: weinig (n=weinig@nat/apple/x-9af445a5f3a59d70)
- # [19:13] <Philip`> http://philip.html5.org/data/doctypes.txt - now correcter in its quirks/standards determination
- # [19:14] <Philip`> and also http://philip.html5.org/data/doctypes-lc.txt - now ignoring trivial differences
- # [19:15] <Philip`> XHTML 1.0 Strict beats HTML 4.01 Strict by a lot
- # [19:17] <hsivonen> annevk: can you suggest how to make the table clearer? it seems inappropriate to suggest that IE7's standards mode were more standards that Gecko/WebKit/Opera Almost Standards
- # [19:18] <Philip`> hsivonen: Label it "standards" but colour it in the "almost standards" darker green?
- # [19:18] <Philip`> I'm sure that's bad for accessibility, though
- # [19:19] * Joins: weinig_ (n=weinig@17.203.15.140)
- # [19:20] <annevk> http://www.metah.ch/blog/2008/01/23/w3c-working-draft-use-html5-not-flash-or-silverlight/
- # [19:20] <annevk> hsivonen, "IE standards mode"
- # [19:20] <annevk> hsivonen, with an additional paragraph that explains the difference
- # [19:21] * MacDomeSleep is now known as MacDome
- # [19:21] * Joins: tndH_ (i=Rob@83.100.254.128)
- # [19:21] * tndH_ is now known as tndH
- # [19:21] <hsivonen> annevk: hmm...
- # [19:23] <hsivonen> annevk: I don't quite like that characterization. but perhaps I have to do something like that when IE8 comes out at the latest
- # [19:23] * Joins: jruderman (n=jruderma@guest-226.mountainview.mozilla.com)
- # [19:23] * Quits: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net) (Read error: 104 (Connection reset by peer))
- # [19:24] * Joins: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [19:24] <hsivonen> it isn't quite fair to suggest Netscape 6 or Mac IE 5 standards modes were on par with contemporary standads modes, either
- # [19:26] * Joins: mpt (n=mpt@canonical/launchpad/mpt)
- # [19:26] <annevk> at some point you should probably put the historical info in a separate table
- # [19:26] * Quits: webben (n=benh@nat/yahoo/x-3bfee8894cfc2739)
- # [19:28] <hsivonen> annevk: or do what I did with the gamma article: put the conclusion in the article and move the research results (for those who don't take my conclusions on face value) on another page
- # [19:30] <hsivonen> annevk: after all, the point of the table isn't to suggest that Web authors use the data. the point is to convince them that I known what I'm talking about (and to give browser QA something to test with)
- # [19:32] * Joins: weinig__ (n=weinig@17.203.15.140)
- # [19:32] * Quits: weinig_ (n=weinig@17.203.15.140) (Read error: 104 (Connection reset by peer))
- # [19:35] <annevk> i've seen at least one post now suggesting that MS might want to push HTML5 forward by accepting that DOCTYPE
- # [19:35] * annevk wondered when that would happen
- # [19:36] * Joins: Richardigel (n=igel@92.226.194.241)
- # [19:36] * Quits: roc_ (n=roc@121-72-0-219.dsl.telstraclear.net)
- # [19:36] * Quits: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net) (Read error: 104 (Connection reset by peer))
- # [19:36] * Quits: Richardigel (n=igel@92.226.194.241) (Remote closed the connection)
- # [19:37] * Joins: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [19:37] * Joins: csarven (n=nevrasc@on-irc.csarven.ca)
- # [19:37] <hsivonen> I don't have the bandwidth to correct all the doctype sniffing misconceptions that have been flying around in various blog comment sections.
- # [19:38] <hsivonen> I guess I need to update my doctype page sooner or later nonetheless
- # [19:38] * Joins: KevinMarks (n=KevinMar@nat/google/x-ed6b0128605d1653)
- # [19:39] * Joins: roc (n=roc@121-72-0-219.dsl.telstraclear.net)
- # [19:42] * Joins: webben (n=benh@nat/yahoo/x-d8e15f951575d8f4)
- # [19:48] * Joins: othermaciej (n=mjs@dsl081-048-145.sfo1.dsl.speakeasy.net)
- # [19:54] * Joins: roc_ (n=roc@121-72-15-187.dsl.telstraclear.net)
- # [19:55] * Quits: weinig__ (n=weinig@17.203.15.140)
- # [20:01] * Joins: maikmerten_ (n=maikmert@T6448.t.pppool.de)
- # [20:04] <SadEagle> Philip`: 83.3% :-)
- # [20:06] <Hixie> Philip`: I don't think so
- # [20:06] * Quits: KevinMarks (n=KevinMar@nat/google/x-ed6b0128605d1653) ("The computer fell asleep")
- # [20:06] <Philip`> SadEagle: I hope you won't make me feel guilty if I ever suggest that the spec should be changed to be more compatible with Firefox/Safari/Opera, if that'll harm your test results since you've actually been following the spec :-)
- # [20:07] <SadEagle> Philip`: that happened already with the path transformation...
- # [20:08] <SadEagle> Philip`: it's not that bad, though, since there at least is a spec.
- # [20:08] <SadEagle> Though fredrik was still reverse-engineering Safari's arcTo..
- # [20:08] * Joins: weinig_ (n=weinig@17.203.15.140)
- # [20:10] * Quits: roc (n=roc@121-72-0-219.dsl.telstraclear.net) (Read error: 110 (Connection timed out))
- # [20:10] <Philip`> SadEagle: Does http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2007-July/012117.html miss some parts of arcTo?
- # [20:11] <SadEagle> Philip`: I won't know, and fredrik isn't around atm
- # [20:17] * Quits: maikmerten (n=maikmert@Laba7.l.pppool.de) (Read error: 113 (No route to host))
- # [20:18] * Quits: weinig_ (n=weinig@17.203.15.140)
- # [20:21] * MacDome is now known as MacDomeOut
- # [20:23] * Quits: psa (n=yomode@71.93.19.66) (Remote closed the connection)
- # [20:24] * Joins: psa (n=yomode@71.93.19.66)
- # [20:33] * Joins: jacobolus1 (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [20:33] * Quits: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net) (Read error: 104 (Connection reset by peer))
- # [20:35] * Quits: othermaciej (n=mjs@dsl081-048-145.sfo1.dsl.speakeasy.net)
- # [20:36] * Quits: webben (n=benh@nat/yahoo/x-d8e15f951575d8f4) (Read error: 110 (Connection timed out))
- # [20:39] * Joins: dbaron_ (n=dbaron@corp-241.mountainview.mozilla.com)
- # [20:40] * Quits: dbaron (n=dbaron@guest-226.mountainview.mozilla.com) (Nick collision from services.)
- # [20:40] * dbaron_ is now known as dbaron
- # [20:55] <jwalden> Hixie: HTML5 says data: URIs have no domain; spec says that document.domain must then be null, but postMessage doesn't quite say how "has no domain" maps to the |domain| attribute on the dispatched event -- is it likewise null, or is it the empty string?
- # [20:56] <hsivonen> Real pre-ISO-8859-1, pre-HTTP 1.0 Web content: http://montaasi.tky.fi/vanha/johtis/vanhat/1957/Kokous-27.09.1957.txt
- # [21:02] <hsivonen> hmm. I need a non-disruptive way to trigger reflow in Gecko from JS
- # [21:02] * Quits: billmason (n=billmaso@ip129.unival.com) (Read error: 104 (Connection reset by peer))
- # [21:03] <annevk> jwalden, the URI itself?
- # [21:03] * Joins: billmason (n=billmaso@ip129.unival.com)
- # [21:04] <jwalden> annevk: a document contained in a data: URL uses postMessage -- what's the value of the domain attribute on the event the receiver will get, null or ""?
- # [21:11] <annevk> oh wait, data: doesn't have a domain so it can't be itself
- # [21:11] <annevk> dunno
- # [21:11] <annevk> haven't tested that
- # [21:15] <jwalden> it's super-edge-case, but I'm implementing it now and can do either way -- figure I should do it right the first time
- # [21:21] <annevk> do you have a test using document.postMessage() ?
- # [21:21] <annevk> i could test in Opera
- # [21:39] * Joins: h3h (n=h3h@74.211.138.130)
- # [21:40] <h3h> I'm sufficiently confused now
- # [21:40] <h3h> http://blogs.msdn.com/cwilso/archive/2008/01/22/i-feel-happy-too.aspx#7202711
- # [21:40] <h3h> so...the IE version lock-in only applies for HTML4 / XHTML1 doctypes?
- # [21:40] <h3h> which means HTML5 can proceed using the latest (most standards-compliant) mode of IE?
- # [21:41] <jwalden> annevk: sec, I'll write something up
- # [21:42] * Quits: csarven (n=nevrasc@on-irc.csarven.ca) (Read error: 110 (Connection timed out))
- # [21:43] <Philip`> h3h: Apparently so, though it's kind of hard to tell yet since Microsoft hasn't been giving out many details and people have to try to piece together random blog comments to work out how it works...
- # [21:43] <jwalden> annevk: data:text/html,<script>window.onload%20=%20function()%20{%20document.addEventListener("message",%20function(e)%20{%20alert("domain:%20"%20+%20e.domain%20+%20",%20type:%20"%20+%20(typeof%20e.domain));%20},%20false);%20window.postMessage("foo");%20};</script>
- # [21:43] <h3h> yeah, kinda ridiculous
- # [21:43] <h3h> they need to publish a technical document
- # [21:44] <h3h> that seems like kind of a big detail to leave out
- # [21:44] <h3h> I think it's the difference between me caring a lot and not caring at all
- # [21:44] <Philip`> If <!doctype not-html-4-or-xhtml-1> gets maximum-standards-support, that would prevent much of the criticism that they've been getting, so it does seem odd to have not mentioned it
- # [21:45] * Quits: maikmerten_ (n=maikmert@T6448.t.pppool.de) ("Leaving")
- # [21:47] * annevk -> mtg
- # [21:58] * Joins: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [22:01] * Quits: grimboy (n=grimboy@78-105-162-250.zone3.bethere.co.uk) (Read error: 110 (Connection timed out))
- # [22:03] * Quits: jacobolus1 (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net) (Read error: 104 (Connection reset by peer))
- # [22:09] <gsnedders> I love half the comments on the IE blog post. "Opt-in to standards? Never!" while assuming the current doctype switch is a standard.
- # [22:12] * Quits: hober (n=ted@unaffiliated/hober) ("ERC Version 5.3 (devel) (IRC client for Emacs)")
- # [22:16] * Joins: hober (n=ted@unaffiliated/hober)
- # [22:16] * Quits: ROBOd (n=robod@89.122.216.38) ("http://www.robodesign.ro")
- # [22:20] * Quits: SadEagle (n=maksim@cpe-69-202-89-106.twcny.res.rr.com) ("Konversation terminated!")
- # [22:20] <gsnedders> anyone know when unicode support was added into Python?
- # [22:20] * Joins: eseidel_ (n=eseidel@nat/google/x-fbb3123ffb0eec56)
- # [22:24] <gsnedders> 2.0, seemingly
- # [22:25] <Philip`> What counts as "support"?
- # [22:26] * Joins: othermaciej (n=mjs@216.239.45.19)
- # [22:30] <gsnedders> I mean in having a native Unicode string type
- # [22:31] * Joins: fredrikh (n=fredrik@kde/fredrik)
- # [22:33] * Philip` adds ieparsehack.js to his web page
- # [22:46] * Joins: SadEagle (n=maksim@69.202.89.106)
- # [22:46] * Joins: zcorpan_ (n=zcorpan@c-cb21e353.1451-1-64736c12.cust.bredbandsbolaget.se)
- # [22:47] <zcorpan_> http://software.hixie.ch/utilities/js/live-dom-viewer/?%3Cbody%3E%0D%0A%3Cscript%3Edocument.createElement('bar')%3C%2Fscript%3E%0D%0A%3Cbar%2F%3Ex%3Cbar%3Ey%3C%2Fbar%3Ez%3C%2Fbar%3E
- # [22:47] <mpt> Philip`, what does it do? Change the render mode between IE7 and IE8 every 0.5 seconds?
- # [22:48] <Dashiva> Philip`: Is the first bar supposed to be self-closing?
- # [22:50] <zcorpan_> Dashiva: was that meant to me?
- # [22:50] <Dashiva> right
- # [22:50] <zcorpan_> well, it is in ie
- # [22:50] <annevk> jwalden, empty string in Opera
- # [22:51] <Dashiva> zcorpan_: Well, it's <bar/>, then <bar></bar> and finally an unmatched </bar> right now
- # [22:51] <annevk> jwalden, sorry for the delay, had a meeting and window.postMessage() does not work in Opera; we use document.postMessage()
- # [22:51] <jwalden> ah
- # [22:51] <jwalden> are you planning on supporting both eventually, then?
- # [22:51] <zcorpan_> Dashiva: right
- # [22:52] <annevk> jwalden, I suppose so...
- # [22:52] <jwalden> we currently return an empty string, for what that's worth
- # [22:52] <zcorpan_> Dashiva: my point is that createElement() causes ie to use "xml parsing" for that tag name, same as tags that have colons in them
- # [22:52] <annevk> ok, that's the same then
- # [22:52] <zcorpan_> i.e. /> is self-closing, unlike for "html parsing"
- # [22:53] <jwalden> hm
- # [22:53] <jwalden> too bad we can't have the same behavior for both
- # [22:53] <Dashiva> zcorpan_: Aren't all unknown elements self-closing by default in IE?
- # [22:53] <jwalden> dunno how much a compatibility concern it'd be to make both null, since changing document.domain is risky-ish
- # [22:53] <zcorpan_> Dashiva: not <foo:bar>
- # [22:54] <annevk> jwalden, does the domain value do what document.domain does?
- # [22:54] <annevk> jwalden, I don't think there's content out there that relies on it being "" so that should be changeable
- # [22:54] <Dashiva> zcorpan_: Yeah, but the issue is making the new elements work in IE, isn't it? And those don't have colons
- # [22:54] <jwalden> annevk: no, data:text/html,<script>alert(document.domain)</script> alerts null for me while the previous was empty string
- # [22:55] <annevk> that's the empty string in Opera
- # [22:55] <zcorpan_> Dashiva: yep. *but*, integration of svg and mathml has been discussed, with /> syntax
- # [22:55] <jwalden> haha
- # [22:55] <annevk> thank god
- # [22:55] <annevk> we're internally consistent :p
- # [22:55] <jwalden> what a mess
- # [22:56] * annevk tries Safari
- # [22:56] <annevk> Safari does empty string too it seems
- # [22:56] * Quits: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net) (Read error: 104 (Connection reset by peer))
- # [22:57] <annevk> data:text/html,<script>alert(document.domain === "")</script> yields true anyway
- # [22:57] * Joins: jacobolus (n=jacobolu@pool-71-119-190-119.lsanca.dsl-w.verizon.net)
- # [22:57] * annevk hopes Firefox can change
- # [22:57] <jwalden> guess Hixie may want to reconsider null vs. empty string
- # [22:57] <jwalden> I can certainly change postMessage
- # [22:58] <jwalden> document.domain, probably as well
- # [22:58] <jwalden> shouldn't be hard, question is whether it breaks people
- # [22:58] * jwalden would hope not
- # [23:00] * Quits: SadEagle (n=maksim@69.202.89.106) (Success)
- # [23:00] <annevk> they'd rely on non-standards!
- # [23:00] <annevk> can you imagine?
- # [23:01] <gsnedders> But they aren't MS, so no need to do much.
- # [23:01] <Philip`> mpt: It just calls document.createElement('header') etc
- # [23:02] * Quits: eseidel_ (n=eseidel@nat/google/x-fbb3123ffb0eec56)
- # [23:02] <mpt> Seriously, I wonder whether changing the value of the <meta> element after-the-fact works
- # [23:02] <gsnedders> mpt: it won't, the action is done when the parser comes across it
- # [23:04] * Joins: eseidel_ (n=eseidel@nat/google/x-fb75d3224c5911d0)
- # [23:04] * Quits: eseidel_ (n=eseidel@nat/google/x-fb75d3224c5911d0) (Client Quit)
- # [23:04] <mpt> that's no fun
- # [23:05] <gsnedders> Or at least that's the impression I got from Chris Wilson when talking to him about it over a month ago in #html-wg
- # [23:06] * Joins: eseidel_ (n=eseidel@nat/google/x-06e72df564294519)
- # [23:07] <Philip`> I wonder how nicely it will interact with the Live DOM Viewer's method of dynamically constructing pages...
- # [23:10] * Quits: othermaciej (n=mjs@216.239.45.19)
- # [23:11] * Joins: jwalden_ (n=waldo@18.58.7.8)
- # [23:12] * Quits: hober (n=ted@unaffiliated/hober) ("ERC Version 5.3 (devel) (IRC client for Emacs)")
- # [23:13] * Quits: jwalden_ (n=waldo@18.58.7.8) (Read error: 104 (Connection reset by peer))
- # [23:14] * Joins: jwalden_ (n=waldo@18.58.7.8)
- # [23:15] * Quits: eseidel_ (n=eseidel@nat/google/x-06e72df564294519) (Read error: 104 (Connection reset by peer))
- # [23:16] * Joins: eseidel_ (n=eseidel@nat/google/x-5ac28e01104af7ec)
- # [23:19] * Quits: jwalden (n=waldo@RANDOM-THREE-O-EIGHT.MIT.EDU) (Read error: 110 (Connection timed out))
- # [23:19] * jwalden_ is now known as jwalden
- # [23:20] * Joins: webben (n=benh@91.84.237.93)
- # [23:23] * Joins: webben_ (n=benh@dip5-fw.corp.ukl.yahoo.com)
- # [23:33] <roc_> of course changing the meta value could not work
- # [23:33] * Quits: zcorpan_ (n=zcorpan@c-cb21e353.1451-1-64736c12.cust.bredbandsbolaget.se) (Read error: 110 (Connection timed out))
- # [23:39] * Quits: webben (n=benh@91.84.237.93) (Connection timed out)
- # [23:49] <jruderman> Hixie: why doesn't <a ping> send referrer? (or cookies or http auth)
- # [23:49] <jruderman> Hixie: not sending referrer seems like it invites CSRF
- # [23:50] * jruderman finds the changelog entry pointing at http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2008-January/013637.html and starts reading it
- # [23:51] <jruderman> ugh
- # [23:52] <jruderman> sites that blacklist attributes in an attempt to prevent XSS/CSRF are broken
- # [23:52] <Hixie> not sending referrer seems to invite CSRF, but that's blocked by not sending cookies, no?
- # [23:52] <Hixie> there's no question that the sites in question are broken
- # [23:52] <jruderman> not sending referrer+cookies makes it harder to prevent CSRF against the link tracker
- # [23:52] <Hixie> why?
- # [23:53] <jruderman> because you have to include a magic token in the ping url
- # [23:53] <jruderman> instead of being able to check the referrer
- # [23:55] <annevk> Referer is not that reliable...
- # [23:55] * Quits: phsiao (n=shawn@nat/ibm/x-b6493e4abd524a2d)
- # [23:56] <jruderman> it's a whole lot more sane than magic tokens
- # [23:57] * Joins: KevinMarks (n=KevinMar@nat/google/x-06c277e103894314)
- # Session Close: Thu Jan 24 00:00:00 2008
The end :)