From: vunzndi@vfemail.net
Date: Tue Jan 23 2007 - 19:05:22 CST
Agreed, blocking PUAs from html pages would lead to people putting the
charcters they want in non PUA locations, which is much worse.
john
Quoting Richard Wordingham <richard.wordingham@ntlworld.com>:
> Philippe Verdy wrote on Monday, January 22, 2007 9:14 AM
>
>> For me, a pure HTML document that contains PUAs should be
> declared invalid > or should remap all PUAs to non-characters with
> the same default "square > box", whatever their source,
> unless the HTMLdocuments instructs explicitly > the browser to use
> a specific PUA convention.
>>
>> I consider this "PUA leakage bug" as a serious security
> issue, much more > serious than a interoperability problem (which
> it is not). To close this > bug, a protocol should be created to
> allow transmitting those private > convention agreements, in
> addition to the character encoding information.
>
> Isn't there already an existing protocol? It's something like, 'To
> read this page properly, you need to install xxx font, which may be
> downloaded from yyy.' It's used for hack fonts based on encoded
> scripts. Why allow these and ban material using the PUA?
>
> Richard.
-------------------------------------------------
This message sent through Virus Free Email
http://www.vfemail.net
This archive was generated by hypermail 2.1.5 : Tue Jan 23 2007 - 19:06:44 CST