Slashdot Mirror

← Back to Stories (view on slashdot.org)

WHATWG calls for 'Last' Comments on Web Forms

Posted by timothy on from the they-should-be-rounder-and-firmer dept.

hixie writes " The W3C recently acknowledged a version of the Web Forms 2.0 draft submitted to the W3C by Mozilla and Opera. Meanwhile the WHATWG has updated the Web Forms draft and released a new call for comments. Send them in!"

3 of 22 comments (clear)

  1. What Working Group?? by cylcyl · · Score: 3, Funny

    What does the What Working group work on ?? What? What?

    1. Re:What Working Group?? by AntsInMyPants · · Score: 5, Informative
      From the main page linked to in the article...

      What is the Web Hypertext Application Technology Working Group?

      It is a loose unofficial collaboration of Web browser manufacturers and interested parties who wish to develop new technologies designed to allow authors to write and deploy Applications over the World Wide Web.

      The working group mailing list is an open subscription public mailing list and anyone is welcome to contribute.

      The focus of this working group is limited to technologies that will need to be directly implemented in Web browsers. It is not the right forum for very domain-specific proposals that would not be suitable for implementation in, for instance, Safari, Firefox, or Opera.

  2. Re:Input validation schemes by Nasarius · · Score: 3, Insightful
    Maybe I'm being paranoid, but can anyone else see lazy PHP coders relying on this, and forgetting to do proper server-side input checking?

    No need to pick on the PHP coders -- you can just as easily write unchecked Perl, ASP, Python, etc -- but yes, some of the biggest website vulnerabilities are caused by relying too much on JavaScript to validate input.

    I mean, essentially you're just having to check everything twice... what was wrong with returning a page informing the user of his or her mistakes, exactly?

    It's a little faster for the user (instant feedback on any mistakes), and it saves a tiny bit of server resources. And it should replace all the JavaScript hacks with one standard interface.

    --
    LOAD "SIG",8,1