--- html5/webdatabase/Overview.html	2010/01/08 08:20:42	1.62
+++ html5/webdatabase/Overview.html	2010/05/12 01:17:21	1.87
@@ -1,4 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US-x-Hixie"><title>Web SQL Database</title><style type="text/css">
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN"><html lang="en-US-x-Hixie"><title>Web SQL Database</title><style type="text/css">
    pre { margin-left: 2em; white-space: pre-wrap; }
    h2 { margin: 3em 0 1em 0; }
    h3 { margin: 2.5em 0 1em 0; }
@@ -24,7 +24,7 @@
    @media screen { code { color: orangered; } code :link, code :visited { color: inherit; } }
    var sub { vertical-align: bottom; font-size: smaller; position: relative; top: 0.1em; }
    table { border-collapse: collapse; border-style: hidden hidden none hidden; }
-   table thead { border-bottom: solid; }
+   table thead, table tbody { border-bottom: solid; }
    table tbody th:first-child { border-left: solid; }
    table tbody th { text-align: left; }
    table td, table th { border-left: solid; border-right: solid; border-bottom: solid thin; vertical-align: top; padding: 0.2em; }
@@ -43,7 +43,7 @@
    pre.idl :link, pre.idl :visited { color: inherit; background: transparent; }
    pre.css { border: solid thin; background: #FFFFEE; color: black; padding: 0.5em 1em; }
    pre.css:first-line { color: #AAAA50; }
-   dl.domintro { color: green; margin: 2em 0 2em 2em; padding: 0.5em 1em; border: none; background: #EEFFEE; }
+   dl.domintro { color: green; margin: 2em 0 2em 2em; padding: 0.5em 1em; border: none; background: #DDFFDD; }
    hr + dl.domintro, div.impl + dl.domintro { margin-top: 2.5em; margin-bottom: 1.5em; }
    dl.domintro dt, dl.domintro dt * { color: black; text-decoration: none; }
    dl.domintro dd { margin: 0.5em 0 1em 2em; padding: 0; }
@@ -141,16 +141,6 @@
    .example { display: block; color: #222222; background: #FCFCFC; border-left: double; margin-left: 2em; padding-left: 1em; }
    td > .example:only-child { margin: 0 0 0 0.1em; }
 
-   .tall-and-narrow {
-     font-size: 0.6em;
-     column-width: 25em;
-     column-gap: 1em;
-     -moz-column-width: 25em;
-     -moz-column-gap: 1em;
-     -webkit-column-width: 25em;
-     -webkit-column-gap: 1em;
-   }
-
    ul.domTree, ul.domTree ul { padding: 0 0 0 1em; margin: 0; }
    ul.domTree li { padding: 0; margin: 0; list-style: none; position: relative; }
    ul.domTree li li { list-style: none; }
@@ -165,6 +155,25 @@
    ul.domTree .t7 code, .domTree .t8 code { color: green; }
    ul.domTree .t10 code { color: teal; }
 
+   body.dfnEnabled dfn { cursor: pointer; }
+   .dfnPanel {
+     display: inline;
+     position: absolute;
+     z-index: 10;
+     height: auto;
+     width: auto;
+     padding: 0.5em 0.75em;
+     font: small sans-serif, Droid Sans Fallback;
+     background: #DDDDDD;
+     color: black;
+     border: outset 0.2em;
+   }
+   .dfnPanel * { margin: 0; padding: 0; font: inherit; text-indent: 0; }
+   .dfnPanel :link, .dfnPanel :visited { color: black; }
+   .dfnPanel p { font-weight: bolder; }
+   .dfnPanel * + p { margin-top: 0.25em; }
+   .dfnPanel li { list-style-position: inside; }
+
    #configUI { position: absolute; z-index: 20; top: 10em; right: 1em; width: 11em; font-size: small; }
    #configUI p { margin: 0.5em 0; padding: 0.3em; background: #EEEEEE; color: black; border: inset thin; }
    #configUI p label { display: block; }
@@ -174,7 +183,7 @@
    <p><a href="http://www.w3.org/"><img alt="W3C" height="48" src="http://www.w3.org/Icons/w3c_home" width="72"></a></p>
    <h1>Web SQL Database</h1>
 
-   <h2 class="no-num no-toc" id="editor-s-draft-8-january-2010">Editor's Draft 8 January 2010</h2>
+   <h2 class="no-num no-toc" id="editor-s-draft-12-may-2010">Editor's Draft 12 May 2010</h2>
    <dl><dt>Latest Published Version:</dt>
     <dd><a href="http://www.w3.org/TR/webdatabase/">http://www.w3.org/TR/webdatabase/</a></dd>
     <dt>Latest Editor's Draft:</dt>
@@ -187,7 +196,7 @@
     <dt>Editors:</dt>
     <dd><a href="mailto:ian@hixie.ch">Ian Hickson</a>, Google, Inc.</dd>
    </dl><p class="copyright"><a href="http://www.w3.org/Consortium/Legal/ipr-notice#Copyright">Copyright</a>
-   &copy; 2009 <a href="http://www.w3.org/"><abbr title="World Wide
+   &copy; 2010 <a href="http://www.w3.org/"><abbr title="World Wide
    Web Consortium">W3C</abbr></a><sup>&reg;</sup> (<a href="http://www.csail.mit.edu/"><abbr title="Massachusetts
    Institute of Technology">MIT</abbr></a>, <a href="http://www.ercim.org/"><abbr title="European Research
    Consortium for Informatics and Mathematics">ERCIM</abbr></a>, <a href="http://www.keio.ac.jp/">Keio</a>), All Rights Reserved. W3C
@@ -211,7 +220,7 @@
   <a href="http://lists.whatwg.org/pipermail/whatwg-whatwg.org/">archives</a>),
   <!-- UNDER NO CIRCUMSTANCES IS THE PRECEDING SENTENCE TO BE REMOVED OR EDITED WITHOUT TALKING TO IAN FIRST -->
 
-  or submit them using <a href="http://www.w3.org/Bugs/Public/enter_bug.cgi?product=WebAppsWG&amp;component=Web%20Storage">our
+  or submit them using <a href="http://www.w3.org/Bugs/Public/enter_bug.cgi?assigned_to=ian%40hixie.ch&amp;blocked=&amp;bug_file_loc=http%3A%2F%2F&amp;bug_severity=normal&amp;bug_status=NEW&amp;comment=&amp;component=Web%20Database%20%28editor%3A%20Ian%20Hickson%29&amp;contenttypeentry=&amp;contenttypemethod=autodetect&amp;contenttypeselection=text%2Fplain&amp;data=&amp;dependson=&amp;description=&amp;form_name=enter_bug&amp;keywords=&amp;maketemplate=Remember%20values%20as%20bookmarkable%20template&amp;op_sys=All&amp;priority=P5&amp;product=WebAppsWG&amp;qa_contact=member-webapi-cvs%40w3.org&amp;rep_platform=All&amp;short_desc=&amp;target_milestone=---&amp;version=unspecified">our
   public bug database</a>.
 
   All feedback is welcome.</p><!-- stability (required) --><p>Implementors should be aware that this specification is not
@@ -246,7 +255,7 @@
   Working Group</a> is the W3C working group responsible for this
   specification's progress along the W3C Recommendation track.
 
-  This specification is the 8 January 2010 Editor's Draft.
+  This specification is the 12 May 2010 Editor's Draft.
   </p><!-- required patent boilerplate --><p>This document was produced by a group operating under the <a href="http://www.w3.org/Consortium/Patent-Policy-20040205/">5
   February 2004 W3C Patent Policy</a>. W3C maintains a <a href="http://www.w3.org/2004/01/pp-impl/42538/status" rel="disclosure">public list of
   any patent disclosures</a> made in connection with the deliverables
@@ -281,7 +290,7 @@
   <ol>
    <li><a href="#user-tracking"><span class="secno">7.1 </span>User tracking</a></li>
    <li><a href="#sensitivity-of-data"><span class="secno">7.2 </span>Sensitivity of data</a></ol></li>
- <li><a href="#security"><span class="secno">8 </span>Security</a>
+ <li><a href="#security-storage"><span class="secno">8 </span>Security</a>
   <ol>
    <li><a href="#dns-spoofing-attacks"><span class="secno">8.1 </span>DNS spoofing attacks</a></li>
    <li><a href="#cross-directory-attacks"><span class="secno">8.2 </span>Cross-directory attacks</a></li>
@@ -366,13 +375,21 @@ prepareDatabase(function(db) {
   agents.<p>User agents may impose implementation-specific limits on
   otherwise unconstrained inputs, e.g. to prevent denial of service
   attacks, to guard against running out of memory, or to work around
-  platform-specific limitations.<h3 id="dependencies"><span class="secno">2.1 </span>Dependencies</h3><p>This specification relies on several other underlying
-  specifications.<dl><dt>HTML5</dt>
+  platform-specific limitations.<p>When support for a feature is disabled (e.g. as an emergency
+  measure to mitigate a security problem, or to aid in development, or
+  for performance reasons), user agents must act as if they had no
+  support for the feature whatsoever, and as if the feature was not
+  mentioned in this specification. For example, if a particular
+  feature is accessed via an attribute in a Web IDL interface, the
+  attribute itself would be omitted from the objects that implement
+  that interface &mdash; leaving the attribute on the object but
+  making it return null or throw an exception is insufficient.<h3 id="dependencies"><span class="secno">2.1 </span>Dependencies</h3><p>This specification relies on several other underlying
+  specifications.<dl><dt>HTML</dt>
 
    <dd>
 
-    <p>Many fundamental concepts from HTML5 are used by this
-    specification. <a href="#refsHTML5">[HTML5]</a></p>
+    <p>Many fundamental concepts from HTML are used by this
+    specification. <a href="#refsHTML">[HTML]</a></p>
 
    </dd>
 
@@ -455,6 +472,10 @@ interface <dfn id="databasecallback">Dat
 
    </li>
 
+   <li><p>If <var title="">origin</var> is not a scheme/host/port
+   tuple, then throw a <code>SECURITY_ERR</code> exception and abort
+   these steps.</li>
+
    <li><p>If the database version provided is not the empty string,
    and there is already a database with the given name from the origin
    <var title="">origin</var>, but the database has a different
@@ -785,14 +806,13 @@ interface <dfn id="sqlstatementerrorcall
 
     <p>If a <i>postflight operation</i> was defined for this instance
     of the transaction steps, then: as one atomic operation, commit
-    the transaction and run the <i>postflight operation</i>. If either
-    fails, then do neither, and instead jump to the last step. (This
-    is basically a hook for the <code title="dom-database-changeVersion"><a href="#dom-database-changeversion">changeVersion()</a></code>
+    the transaction and, if that succeeds, run the <i>postflight
+    operation</i>. If the commit fails, then instead jump to the last
+    step. (This is basically a hook for the <code title="dom-database-changeVersion"><a href="#dom-database-changeversion">changeVersion()</a></code>
     method.)</p>
 
-    <p>Otherwise: commit the transaction and run the <i>postflight
-    operation</i>. If an error occurred in the committing of the
-    transaction, jump to the last step.</p>
+    <p>Otherwise: commit the transaction. If an error occurred in the
+    committing of the transaction, jump to the last step.</p>
 
    </li>
 
@@ -967,9 +987,9 @@ interface <dfn id="sqltransactionsync">S
   zero (querying the database doesn't affect any rows).<p>The <dfn id="dom-sqlresultset-rows" title="dom-SQLResultSet-rows"><code>rows</code></dfn>
   attribute must return a <code><a href="#sqlresultsetrowlist">SQLResultSetRowList</a></code>
   representing the rows returned, in the order returned by the
-  database. If no rows were returned, then the object will be empty
-  (its <code title="dom-SQLResultSetRowList-length"><a href="#dom-sqlresultsetrowlist-length">length</a></code> will
-  be zero).<pre class="idl">interface <dfn id="sqlresultsetrowlist">SQLResultSetRowList</dfn> {
+  database. The same object must be returned each time. If no rows
+  were returned, then the object will be empty (its <code title="dom-SQLResultSetRowList-length"><a href="#dom-sqlresultsetrowlist-length">length</a></code> will be
+  zero).<pre class="idl">interface <dfn id="sqlresultsetrowlist">SQLResultSetRowList</dfn> {
   readonly attribute unsigned long <a href="#dom-sqlresultsetrowlist-length" title="dom-SQLResultSetRowList-length">length</a>;
   getter <span>any</span> <a href="#dom-sqlresultsetrowlist-item" title="dom-SQLResultSetRowList-item">item</a>(in unsigned long index);
 };</pre><p class="note">For the asynchronous API, implementors are
@@ -1087,8 +1107,8 @@ interface <dfn id="sqltransactionsync">S
      reasonable time.
 
   </table><h2 id="web-sql"><span class="secno">5 </span>Web SQL</h2><p>User agents must implement the SQL dialect supported by Sqlite 3.6.19.<p>When converting bound arguments to SQL data types, the JavaScript
-  ToPrimitive operator must be applied to obtain the raw value to be
-  processed. <a href="#refsECMA262">[ECMA262]</a>.<h2 id="disk-space"><span class="secno">6 </span>Disk space</h2><p>User agents should limit the total amount of space allowed for
+  ToPrimitive abstract operation must be applied to obtain the raw
+  value to be processed. <a href="#refsECMA262">[ECMA262]</a>.<h2 id="disk-space"><span class="secno">6 </span>Disk space</h2><p>User agents should limit the total amount of space allowed for
   databases.
   
   <p>User agents should guard against sites storing data under the
@@ -1222,7 +1242,7 @@ interface <dfn id="sqltransactionsync">S
   sensitive; it's quite possible for e-mails, calendar appointments,
   health records, or other confidential documents to be stored in this
   mechanism.<p>To this end, user agents should ensure that when deleting data,
-  it is promptly deleted from the underlying storage.<h2 id="security"><span class="secno">8 </span>Security</h2><h3 id="dns-spoofing-attacks"><span class="secno">8.1 </span>DNS spoofing attacks</h3><p>Because of the potential for DNS spoofing attacks, one cannot
+  it is promptly deleted from the underlying storage.<h2 id="security-storage"><span class="secno">8 </span>Security</h2><h3 id="dns-spoofing-attacks"><span class="secno">8.1 </span>DNS spoofing attacks</h3><p>Because of the potential for DNS spoofing attacks, one cannot
   guarantee that a host claiming to be in a certain domain really is
   from that domain. To mitigate this, pages can use SSL. Pages using
   SSL can be sure that only pages using SSL that have certificates
@@ -1261,39 +1281,37 @@ interface <dfn id="sqltransactionsync">S
   there is little reason to allow Web authors to control the character
   encoding used in the disk representation of the data, as all data in
   JavaScript is implicitly UTF-16.<h3 id="sql-injection"><span class="secno">8.5 </span>SQL injection</h3><p>Authors are strongly recommended to make use of the <code title="">?</code> placeholder feature of the <code title="dom-sqltransaction-executeSql"><a href="#dom-sqltransaction-executesql">executeSql()</a></code> method,
-  and to never construct SQL statements on the fly.<h2 class="no-num" id="references">References</h2><!--REFS--><p>All references are normative unless marked "Non-normative".</p><!-- XXX really should remove dates and version numbers from these references once and for all --><dl><dt id="refsCOOKIES">[COOKIES]</dt>
+  and to never construct SQL statements on the fly.<h2 class="no-num" id="references">References</h2><!--REFS--><p>All references are normative unless marked "Non-normative".</p><!-- Dates are only included for standards older than the Web, because the newer ones keep changing. --><dl><dt id="refsCOOKIES">[COOKIES]</dt>
    <!--
    <dd><cite><a href="http://www.ietf.org/rfc/rfc2109.txt">HTTP State
-   Management Mechanism</a></cite>, D. Kristol, L. Montulli. IETF,
-   February 1997.</dd>
+   Management Mechanism</a></cite>, D. Kristol, L. Montulli. IETF.</dd>
    <dd><cite><a href="http://www.ietf.org/rfc/rfc2965.txt">HTTP State Management
-   Mechanism</a></cite>, D. Kristol, L. Montulli. IETF, October 2000.</dd>
+   Mechanism</a></cite>, D. Kristol, L. Montulli. IETF.</dd>
    -->
-   <dd><cite><a href="http://tools.ietf.org/html/draft-abarth-cookie">HTTP State
-   Management Mechanism</a></cite>, A. Barth. IETF, August 2009.</dd>
+   <dd><cite><a href="http://tools.ietf.org/html/draft-ietf-httpstate-cookie">HTTP State
+   Management Mechanism</a></cite>, A. Barth. IETF.</dd>
 
    <dt id="refsDOMCORE">[DOMCORE]</dt>
    <dd><cite><a href="http://www.w3.org/TR/DOM-Level-3-Core/">Document
    Object Model (DOM) Level 3 Core Specification</a></cite>, A. Le
    Hors, P. Le Hegaret, L. Wood, G. Nicol, J. Robie, M. Champion,
-   S. Byrnes. W3C, April 2004.</dd>
+   S. Byrnes. W3C.</dd>
    <!--
    <dd><cite><a href="http://simon.html5.org/specs/web-dom-core">Web
-   DOM Core</a></cite>, S. Pieters. W3C, June 2009.</dd>
+   DOM Core</a></cite>, S. Pieters. W3C.</dd>
    -->
 
    <dt id="refsECMA262">[ECMA262]</dt>
    <dd><cite><a href="http://www.ecma-international.org/publications/standards/Ecma-262.htm">ECMAScript
-   Language Specification</a></cite>. ECMA, December 1999.</dd>
+   Language Specification</a></cite>. ECMA.</dd>
 
-   <dt id="refsHTML5">[HTML5]</dt>
-   <dd><cite><a href="http://www.whatwg.org/specs/web-apps/current-work/">HTML5</a></cite>,
-   I. Hickson. WHATWG, August 2009.</dd>
+   <dt id="refsHTML">[HTML]</dt>
+   <dd><cite><a href="http://www.whatwg.org/specs/web-apps/current-work/">HTML</a></cite>,
+   I. Hickson. WHATWG.</dd>
 
    <dt id="refsRFC2119">[RFC2119]</dt>
    <dd><cite><a href="http://www.ietf.org/rfc/rfc2119.txt">Key words for use in
-   RFCs to Indicate Requirement Levels</a></cite>, S. Bradner. IETF, March
-   1997.</dd>
+   RFCs to Indicate Requirement Levels</a></cite>, S. Bradner. IETF.</dd>
 
    <dt id="refsSQL">[SQL]</dt>
    <dd>The precise dialect has not yet been specified.</dd>
@@ -1301,9 +1319,9 @@ interface <dfn id="sqltransactionsync">S
    <dt id="refsWEBIDL">[WEBIDL]</dt>
    <!--
    <dd><cite><a href="http://www.w3.org/TR/WebIDL/">Web
-   IDL</a></cite>, C. McCormack. W3C, December 2008.</dd>
+   IDL</a></cite>, C. McCormack. W3C.</dd>
    -->
    <dd><cite><a href="http://dev.w3.org/2006/webapi/WebIDL/">Web
-   IDL</a></cite>, C. McCormack. W3C, July 2009.</dd>
+   IDL</a></cite>, C. McCormack. W3C.</dd>
 
   </dl>
