Implement window.{alert, prompt, confirm} removal from cross-origin iframes

Re:Implement window.{alert, prompt, confirm} removal from cr... by geofft on Tuesday August 03, 2021 @08:00PM (#28055760)

It is a mantra that web browser teams heed. That's why the HTML living standard is the absolute mess it is.

"We don't break userspace" is not an absolute rule, and has plenty of exceptions in practice, including security and things where no legitimate use case has been identified.

[ Parent | on HN ]

Re:Implement window.{alert, prompt, confirm} removal from cr... by hitekker on Tuesday August 03, 2021 @09:04PM (#28056121)

Linus Torvald coined the phrase "We don't break userspace" and he has been less than nice to people who seek to undermine compatibility in the name of security: http://lkml.iu.edu/hypermail/linux/kernel/1711.2/01701.html

[ Parent | on HN ]

Re:Implement window.{alert, prompt, confirm} removal from cr... by Arnavion on Tuesday August 03, 2021 @11:06PM (#28056760)

Interestingly enough, the kernel has broken my (userspace) programs at two different occasions. Both times were knowing and intentional, as in the commit messages acknowledged that they were making breaking changes, and they weren't because of security either.

But these were only two occasions over ~10 years, so it's not too big of a deal.

[ Parent | on HN ]

Re:Implement window.{alert, prompt, confirm} removal from cr... by geofft on Wednesday August 04, 2021 @09:18AM (#28060661)

I understand where the phrase is from. I am saying the rule is not as absolute as you think it is. Linus himself breaks userspace on occasion where it is warranted.

[ Parent | on HN ]