Comments (8)
Comment #1 originally posted by mikesamuel on 2008-01-29T00:16:59.000Z:
The onerror attribute of window?
How should it behave? If an onerror handler is specified in the global scope, it
should receive exceptions thrown by scripts in extracted script tags?
from caja.
Comment #2 originally posted by sshjason on 2008-01-29T01:00:14.000Z:
Mainly for data content failing to load, such as I believe the event is also raised with object tags.
from caja.
Comment #3 originally posted by mikesamuel on 2008-01-29T02:31:31.000Z:
Do you also require onabort?
It looks like SVG also uses those.
Do you know of any good documentation on the behavior of onerror/onabort? I get
nothing by searching for "onerror onabort site:w3.org -SVG -XmlHttpRequest".
from caja.
Comment #4 originally posted by mikesamuel on 2008-01-29T02:40:41.000Z:
There's some documentation at http://www.quirksmode.org/js/events_compinfo.html#t40
from caja.
Comment #5 originally posted by sshjason on 2008-01-29T03:53:33.000Z:
Also looks like it only loads on img tags, not object tags.
from caja.
Comment #6 originally posted by mikesamuel on 2008-02-19T22:35:16.000Z:
Jason,
Can you supply a testcase that you want to work?
mike
from caja.
Comment #7 originally posted by sshjason on 2008-02-19T23:07:28.000Z:
This would be the normal way to handle an onerror with an image:
However, due to the security issues with 'this', there is:
~/Jason Hullinger
from caja.
Comment #8 originally posted by mikesamuel on 2008-03-09T02:55:14.000Z:
If you add the following to your html attribute whitelist
types: [
{ "key": "IMG:ONCLICK", "description": "called if an image fails to load",
"type": "SCRIPT", "optional": true },
],
allowed: ["IMG:ONCLICK"],
then onclick will be extracted and cajoled just like any other script attribute.
from caja.
Related Issues (20)
- playground: empty "cajoled source" HOT 1
- Allow <video autoplay muted> in sanitizer HOT 1
- HTML comments are removed by sanitize
- API documentation link is dead HOT 10
- "show in folder" in chrome/chomium downloads just opens folder in caja, but does not selects particular file HOT 3
- Content of iframe's not loading HOT 1
- Missing comma in css-whitelist.json HOT 1
- Html.Exploit.CVE_2016_3198-1 HOT 1
- "tel", "sms", and "geo" uri schemes stripped out HOT 1
- Uncaught TypeError: Cannot read property 'get' of undefined HOT 2
- Support Blob URLs and window.URL API HOT 3
- Documentation for hosting caja server HOT 5
- Error while processing the html HOT 2
- Caja does not make use of SMB2 FSCTL_SRV_COPYCHUNK HOT 1
- null pointer error HOT 2
- Compare strings with"==" or "!="
- csslexer lockup the browser HOT 1
- URI.prototype.getQuery may unexpectedly decode "%2B" to SPACE due to order of operations HOT 1
- [debug.js] TODO(erights): "Explore alternatives to using "instanceof Error" HOT 1
- Unreleased Resource: Streams
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from caja.