The Wayback Machine - https://web.archive.org/web/20230509023120/https://github.com/whatwg/html
Skip to content

whatwg/html

main
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
43 branches 0 tags
Code

Latest commit

@domenic
domenic Do not do same-URL replace navigations when initiated cross-origin
dc564b9 May 8, 2023
Do not do same-URL replace navigations when initiated cross-origin 
This allows attackers to do a boolean probe on the URL of a cross-origin iframe, by attempting to navigate it to a given URL, and if history.length does not increase, they know that the iframe is currently pointed to that URL.

Closes #2018, at least the actionable part where you can get more information than just what is retrieved using the load event.
dc564b9

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
.github/workflows
Meta: move to GitHub Container Registry
May 5, 2023 03:35
demos
Meta: compress PNG images
July 28, 2021 10:59
dev
Meta: use <p> for subheading instead of <h2>
November 7, 2022 07:01
fonts
Meta: remove Apache .htaccess files
December 16, 2017 07:55
images
Add the <search> element
March 24, 2023 10:54
review-drafts
Review Draft Publication: January 2023
January 16, 2023 10:39
.editorconfig
Fix clock and blue-robot demos
January 6, 2016 11:00
.gitattributes
Meta: Commit Snapshot and Review Draft support
May 29, 2018 16:31
.pr-preview.json
Meta: add config file for PR Preview
December 3, 2017 10:47
404.html
Meta: update the 404 to invite filing issues instead of email
December 15, 2017 14:47
CONTRIBUTING.md
Meta: link to new Chat page (#6747)
June 8, 2021 15:52
FAQ.md
Meta: update outdated parts of the FAQ
November 8, 2022 11:33
LICENSE
Meta: update repository files
March 23, 2021 14:31
Makefile
Meta: remove review-draft.sh
July 22, 2022 14:39
PULL_REQUEST_TEMPLATE.md
Meta: update repository files
October 17, 2022 12:02
README.md
Update web-platform-tests URL
June 11, 2018 17:56
html-dfn.js
Meta: Update the dfn panels to match Bikeshed's output more closely
October 2, 2020 11:58
link-fixup.js
Meta: Fix link-fixup.js following a change in wattsi
August 31, 2017 18:29
source
Do not do same-URL replace navigations when initiated cross-origin
May 9, 2023 07:48
styles.css
Refactor import-related host hooks to follow the JS spec
December 26, 2022 04:58
Code of conduct Contribution opportunities Tests Blame

README.md

This repository hosts the HTML Standard.

Code of conduct

We are committed to providing a friendly, safe and welcoming environment for all. Please read and respect the WHATWG Code of Conduct.

Contribution opportunities

We appreciate all contributions, see the guidelines for contributing for details, including information on how to build HTML output from the source file so you can preview your changes locally.

Tests

Tests are in the html/ directory of the web-platform-tests repository.

Blame

As the source file is too large for GitHub's blame utility, use blame for source on searchfox instead.

About

HTML Standard

html.spec.whatwg.org/multipage/

Topics

html canvas storage websocket workers standard whatwg eventsource html-standard

Resources

Readme

License

View license

Stars

6.7k stars

Watchers

669 watching

Forks

2.5k forks
Report repository

Contributors 351

+ 340 contributors

Languages