-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Discourage use of document.domain #5128
Labels
impacts documentation
Used by documentation communities, such as MDN, to track changes that impact documentation
removal/deprecation
Removing or deprecating a feature
topic: origin
Comments
zcorpan
added
removal/deprecation
Removing or deprecating a feature
topic: origin
labels
Dec 5, 2019
I agree there should be stronger wording to discourage its use. |
I've also filed https://bugs.chromium.org/p/chromium/issues/detail?id=1031069 to add a warning in devtools console. |
@whatwg/documentation |
sideshowbarker
added
the
impacts documentation
Used by documentation communities, such as MDN, to track changes that impact documentation
label
Dec 28, 2019
domenic
added a commit
that referenced
this issue
Jul 8, 2020
* Expand the previous warning, and make it more prominent. Closes #5128. * Update the algorithm steps to modern Web IDL style. * Update the domintro by incorporating the note on what it does, and describing failure cases in more detail. * Move the helper algorithm below the getter/setter steps.
domenic
added a commit
that referenced
this issue
Jul 10, 2020
* Expand the previous warning, and make it more prominent. Closes #5128. * Update the algorithm steps to modern Web IDL style. * Update the domintro by incorporating the note on what it does, and describing failure cases in more detail. * Move the helper algorithm below the getter/setter steps.
mfreed7
pushed a commit
to mfreed7/html
that referenced
this issue
Sep 11, 2020
* Expand the previous warning, and make it more prominent. Closes whatwg#5128. * Update the algorithm steps to modern Web IDL style. * Update the domintro by incorporating the note on what it does, and describing failure cases in more detail. * Move the helper algorithm below the getter/setter steps.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
impacts documentation
Used by documentation communities, such as MDN, to track changes that impact documentation
removal/deprecation
Removing or deprecating a feature
topic: origin
https://html.spec.whatwg.org/multipage/origin.html#dom-document-domain
In the context of #5122 it struck me that the spec and MDN doesn't discourage use of
document.domain
or explain why it's bad and what web developers should do instead to communicate across origins.document.domain
being set ~11.4%document.domain
being set AND it allowed cross-origin access ~0.5%cc @whatwg/security
The text was updated successfully, but these errors were encountered: