[319] [whatwg] Spec for location object needs to make some properties unforgeable; need supporting WebIDL changes
( ( 版))
http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2012-November/038015.html
[322] Web Applications 1.0 r7513 Update Location's members to point to the right document.
( ( 版))
http://html5.org/tools/web-apps-tracker?from=7512&to=7513
[323] Web Applications 1.0 r7514 Make Location be protected from cross-origin access like Window.
( ( 版))
http://html5.org/tools/web-apps-tracker?from=7513&to=7514
[324] Web Applications 1.0 r7515 More security fixes: Location is now entirely Unforgeable, and wording for some other security paragraphs is now consistent.
( ( 版))
http://html5.org/tools/web-apps-tracker?from=7514&to=7515
[325] Web Applications 1.0 r7516 Location's security model is actually different than Window's.
( ( 版))
http://html5.org/tools/web-apps-tracker?from=7515&to=7516
[327] Web Applications 1.0 r7758 Allow custom properties on Location objects to work for the Document whose Location object it originally was.
( ( 版))
http://html5.org/tools/web-apps-tracker?from=7757&to=7758
[328] Web Applications 1.0 r7846 Try to match reality better for dynamic location.hash navigation.
( ( 版))
http://html5.org/tools/web-apps-tracker?from=7845&to=7846
[409] Cross-origin windows and how to explain them in ECMAScript semantics
( (David Bruant 著, 版))
http://lists.w3.org/Archives/Public/public-script-coord/2014JanMar/0140.html
[9] Give workers a base URL and clean up shared workers · whatwg/html@b620471 ( 版) https://github.com/whatwg/html/commit/b620471ff823e8e6507b077cf0785a530762f5e3
[15] Tie Location to the Window object · whatwg/html@fdd8216
( 版)
https://github.com/whatwg/html/commit/fdd8216a902a065dd3e205cbbc1b5a6b527970a2
[36] Cross-origin objects: do not wrap JavaScript functions
( (annevk著, ))
https://github.com/whatwg/html/commit/db361b608157b5cf9fd0d491d7dc76cdce80380b
[45] Explain why cross-origin properties are configurable
(domenic著, )
https://github.com/whatwg/html/commit/7891ea33f643f2b6af18dacc532378671c922b76
[50] document.location requires document to be fully active
(annevk著, )
https://github.com/whatwg/html/commit/126ec9eadb149285c8f41a40929ff53ca8112826
[51] Throw for cross-origin [[Delete]] and use "SecurityError" as needed
(annevk著, )
https://github.com/whatwg/html/commit/9b22d034cd5a89cac9e54174d009ef8a256bcf13
[52] Make Location's toString() work and drop its toJSON()
(annevk著, )
https://github.com/whatwg/html/commit/74a78cb74c07b81bc195bdf50d90811f8f5ee5aa
[53] Remove javascript URL case from <a>/<area>/Location hash setter
(annevk著, )
https://github.com/whatwg/html/commit/deea9fba916cb6e66c7dcfc57442cf25ac0441a1
[54] Tweak the exposure of cross-origin properties
(domenic著, )
https://github.com/whatwg/html/commit/79b4fbc6cfa2123620fa05c27579f4ec1e7d9c5d
[55] Why are indexed properties on WindowProxy not enumerable in the spec? · Issue #2753 · whatwg/html
()
https://github.com/whatwg/html/issues/2753
[56] Why are indexed properties on WindowProxy not enumerable in the spec? · Issue #2753 · whatwg/html
()
https://github.com/whatwg/html/issues/2753
[57] Tweak the exposure of cross-origin properties by domenic · Pull Request #2777 · whatwg/html
()
https://github.com/whatwg/html/pull/2777
[59] Enumerable cross-origin properties don't seem to be web-compatible · Issue #3183 · whatwg/html
()
https://github.com/whatwg/html/issues/3183
[70] Enumerate less cross-origin properties by annevk · Pull Request #3186 · whatwg/html
()
https://github.com/whatwg/html/pull/3186
[71] Make crossOriginObject.then undefined for promises
(annevk著, )
https://github.com/whatwg/html/commit/6031e3a2d66ee2ff11d09abd18e6a25a3c78c5ba
[72] No way to resolve a Promise with a cross domain WindowProxy · Issue #536 · whatwg/dom
()
https://github.com/whatwg/dom/issues/536
[73] Make crossOriginObject.then undefined for promises by annevk · Pull Request #3242 · whatwg/html
()
https://github.com/whatwg/html/pull/3242
[74] WindowProxy and Location use ordinary internal methods by default
(annevk著, )
https://github.com/whatwg/html/commit/44da6795888d90cc7d4181a57e5b7aeafe461fb5
[75] Correct branching logic in choosing a browsing context by annevk · Pull Request #4197 · whatwg/html
()
https://github.com/whatwg/html/pull/4197
[76] Handle cross-origin "then" and friends at a later point
(annevk著, )
https://github.com/whatwg/html/commit/5e370be9b9d48fe5106472db0ea65e01c64387bc
[77] Handling of "then" on cross-origin windows doesn't match what we agreed to do or browsers · Issue #4251 · whatwg/html
()
https://github.com/whatwg/html/issues/4251
[78] Handle cross-origin "then" and friends at a later point by annevk · Pull Request #4269 · whatwg/html
()
https://github.com/whatwg/html/pull/4269
[79] WindowProxy and Location use ordinary internal methods by default
(annevk著, )
https://github.com/whatwg/html/commit/44da6795888d90cc7d4181a57e5b7aeafe461fb5
[80] Should clearly define that the ordinary object internal methods are used when not stated otherwise for WindowProxy and Location · Issue #4189 · whatwg/html
()
https://github.com/whatwg/html/issues/4189
[81] Clarify that WindowProxy and Location use ordinary internal methods by default by annevk · Pull Request #4191 · whatwg/html
()
https://github.com/whatwg/html/pull/4191
[82] Only run "perform a security check" for Window and Location objects
(annevk, , )
https://github.com/whatwg/html/commit/e46fc2f59a064ab4e45b9f3e6fa9322ad591ef0f
[83] Only run "perform a security check" for Window and Location objects by annevk · Pull Request #5141 · whatwg/html
()
https://github.com/whatwg/html/pull/5141
[84] Consolidate performing a security check in the spec with implementations · Issue #2360 · whatwg/html
()
https://github.com/whatwg/html/issues/2360