http://codereview.appspot.com/4172053/diff/1/java/gadgets/src/main/java/org/apache/shindig/gadgets/parse/caja/CajaHtmlSerializer.java File java/gadgets/src/main/java/org/apache/shindig/gadgets/parse/caja/CajaHtmlSerializer.java (right): http://codereview.appspot.com/4172053/diff/1/java/gadgets/src/main/java/org/apache/shindig/gadgets/parse/caja/CajaHtmlSerializer.java#newcode59 java/gadgets/src/main/java/org/apache/shindig/gadgets/parse/caja/CajaHtmlSerializer.java:59: protected String renderDocType(DocumentType docType) { I do not understand ...
15 years, 1 month ago
(2011-02-17 20:57:19 UTC)
#3
http://codereview.appspot.com/4172053/diff/1/java/gadgets/src/main/java/org/a...
File
java/gadgets/src/main/java/org/apache/shindig/gadgets/parse/caja/CajaHtmlSerializer.java
(right):
http://codereview.appspot.com/4172053/diff/1/java/gadgets/src/main/java/org/a...
java/gadgets/src/main/java/org/apache/shindig/gadgets/parse/caja/CajaHtmlSerializer.java:59:
protected String renderDocType(DocumentType docType) {
I do not understand the threats associated with public ids and system ids (those
that are javascript urls for example). Gadgets are not required to support
doctypes other than standards mode and this is a safe value to render.
On 2011/02/17 20:46:36, gagan.goku wrote:
> shouldn't this be HtmlSerialization.outputDocType(docType, sw) ?
> or does caja not output system and public id at all ?
Pardon my lack of knowledge about gadgets. lgtm from my side. http://codereview.appspot.com/4172053/diff/1/java/gadgets/src/main/java/org/apache/shindig/gadgets/parse/caja/CajaHtmlSerializer.java File java/gadgets/src/main/java/org/apache/shindig/gadgets/parse/caja/CajaHtmlSerializer.java (right): ...
15 years, 1 month ago
(2011-02-17 21:09:41 UTC)
#4
Pardon my lack of knowledge about gadgets.
lgtm from my side.
http://codereview.appspot.com/4172053/diff/1/java/gadgets/src/main/java/org/a...
File
java/gadgets/src/main/java/org/apache/shindig/gadgets/parse/caja/CajaHtmlSerializer.java
(right):
http://codereview.appspot.com/4172053/diff/1/java/gadgets/src/main/java/org/a...
java/gadgets/src/main/java/org/apache/shindig/gadgets/parse/caja/CajaHtmlSerializer.java:59:
protected String renderDocType(DocumentType docType) {
On 2011/02/17 20:57:19, jasvir wrote:
> I do not understand the threats associated with public ids and system ids
(those
> that are javascript urls for example). Gadgets are not required to support
> doctypes other than standards mode and this is a safe value to render.
>
> On 2011/02/17 20:46:36, gagan.goku wrote:
> > shouldn't this be HtmlSerialization.outputDocType(docType, sw) ?
> > or does caja not output system and public id at all ?
>
all good then. gadgets spec seems to say that any doctype is fine, so i guess
this is the best value to use.
Issue 4172053: Small change to render doctype
(Closed)
Created 15 years, 1 month ago by Jasvir
Modified 14 years, 2 months ago
Reviewers: johnfargo, gagan.goku, mgmarum
Base URL: https://svn.apache.org/repos/asf/shindig/trunk/
Comments: 4