Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove beforescriptexecute/afterscriptexecute #1103

Merged
merged 1 commit into from
Apr 23, 2016
Merged

Conversation

domenic
Copy link
Member

@domenic domenic commented Apr 22, 2016

These have failed to garner implementer interest beyond one engine.
Fixes #943.


I think we've given these enough of a shot. Similar to other single-vendor features (including both unloved ones, like showModalDialog, and loved ones, like MediaController) we should be removing them.

Related: #1100.

These have failed to garner implementer interest beyond one engine.
Fixes #943.
@domenic domenic added the removal/deprecation Removing or deprecating a feature label Apr 22, 2016
@annevk annevk merged commit 1a0b5e8 into master Apr 23, 2016
@annevk annevk deleted the remove-script-events branch April 23, 2016 02:38
@domenic domenic mentioned this pull request Jun 9, 2016
@Swyter
Copy link

Swyter commented Sep 17, 2016

This was a bad move. There is no alternative way of controlling script execution, it may be a niche feature, but has its purpose for user scripts, web extensions and other client-side blocking software.

@zcorpan
Copy link
Member

zcorpan commented Sep 17, 2016

Browsers can expose any events to user scripts and extensions.

@Swyter
Copy link

Swyter commented Sep 17, 2016

In a totally unstandardized way. This is about interoperability after all.

@nickknw
Copy link

nickknw commented May 3, 2019

In case this is revisited in the next update to the standards, one very compelling use case for the existence of this event is to enable a new class of very effective XSS mitigation techniques: https://www.researchgate.net/publication/320748079_WebMTD_Defeating_Web_Code_Injection_Attacks_using_Web_Element_Attribute_Mutation

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
removal/deprecation Removing or deprecating a feature
Development

Successfully merging this pull request may close these issues.

Deal with beforescriptexecute/afterscriptexecute
5 participants