Re: [XXE] srcdoc attribute implementation issues

2017-04-29 Thread Leif Halvard Silli
On 29 Apr 2017, at 10:22, Hussein Shafie wrote: This change will probably not happen before we officially support (X)HTML 5.1. (For now, we don't support (X)HTML 5.1, just (X)HTML 5.0.) XXe currently breaks HTML 5.0 and HTML 5.1 equally much: HTML 5.1 adds a code example which I could not f

Re: [XXE] srcdoc attribute implementation issues

2017-04-29 Thread Hussein Shafie
On 04/28/2017 07:21 PM, Leif Halvard Silli wrote: No, not at all. Reporting a Java bug to Oracle is a lot of work and I confess that we tend to "forget" reporting Java bugs to Oracle. Understand. However, since the bug already exists, in a product they have released, might it not be possible t

Re: [XXE] srcdoc attribute implementation issues

2017-04-29 Thread Leif Halvard Silli
On 28 Apr 2017, at 17:11, Hussein Shafie wrote: On 04/28/2017 03:55 PM, Leif Halvard Silli wrote: On 27 Apr 2017, at 9:58, Hussein Shafie wrote: Ok. Is there an easy way to report this bug to Oracle? There is no easy way to report a bug to Oracle. They require you to write in Java a self-

Re: [XXE] srcdoc attribute implementation issues

2017-04-28 Thread Hussein Shafie
On 04/28/2017 03:55 PM, Leif Halvard Silli wrote: On 27 Apr 2017, at 9:58, Hussein Shafie wrote: On 04/26/2017 11:51 PM, Leif Halvard Silli wrote: 1. However, the parser of XMLmind XML editor does not conform to this: I have noticed that when DOCTYPE is excluded, then the document

Re: [XXE] srcdoc attribute implementation issues

2017-04-28 Thread Leif Halvard Silli
On 27 Apr 2017, at 9:58, Hussein Shafie wrote: On 04/26/2017 11:51 PM, Leif Halvard Silli wrote: 1. However, the parser of XMLmind XML editor does not conform to this: I have noticed that when DOCTYPE is excluded, then the document is rendered - within XXE - in quirks-mode.

Re: [XXE] srcdoc attribute implementation issues

2017-04-27 Thread Hussein Shafie
On 04/26/2017 11:51 PM, Leif Halvard Silli wrote: 1. Speaking as a former HTML Working Group member: quirks mode is a concept that, for srcdoc documents, does not exist. That is: HTML5.x says that the author may include or exclude the DOCTYPE, it does not matter, the document mu