{"action":"created","issue":{"url":"https://api.github.com/repos/whatwg/html/issues/714","repository_url":"https://api.github.com/repos/whatwg/html","labels_url":"https://api.github.com/repos/whatwg/html/issues/714/labels{/name}","comments_url":"https://api.github.com/repos/whatwg/html/issues/714/comments","events_url":"https://api.github.com/repos/whatwg/html/issues/714/events","html_url":"https://github.com/whatwg/html/pull/714","id":134916967,"number":714,"title":"Allow truncation of alert/confirm/prompt text","user":{"login":"domenic","id":617481,"avatar_url":"https://avatars.githubusercontent.com/u/617481?v=3","gravatar_id":"","url":"https://api.github.com/users/domenic","html_url":"https://github.com/domenic","followers_url":"https://api.github.com/users/domenic/followers","following_url":"https://api.github.com/users/domenic/following{/other_user}","gists_url":"https://api.github.com/users/domenic/gists{/gist_id}","starred_url":"https://api.github.com/users/domenic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/domenic/subscriptions","organizations_url":"https://api.github.com/users/domenic/orgs","repos_url":"https://api.github.com/users/domenic/repos","events_url":"https://api.github.com/users/domenic/events{/privacy}","received_events_url":"https://api.github.com/users/domenic/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/whatwg/html/labels/normative%20change","name":"normative change","color":"207de5"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-19T17:01:59Z","updated_at":"2016-02-19T17:09:45Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/whatwg/html/pulls/714","html_url":"https://github.com/whatwg/html/pull/714","diff_url":"https://github.com/whatwg/html/pull/714.diff","patch_url":"https://github.com/whatwg/html/pull/714.patch"},"body":"As discussed recently on blink-dev, these dialogs are often used for\r\nscams and such. At least Chrome has already applied the mitigation\r\nstrategy of limiting the length of the author-supplied text to 2K\r\ncharacters (and @avidrissman proposes that Chrome limit it further). We\r\nshould call out in the spec that this is explicitly allowed, like we\r\nalready do for the beforeunload text.\r\n\r\nhttps://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/cFtsKXKd4F0\r\nhas some background.\r\n\r\n--\r\n\r\nCurious if any other browsers also have limits in place already. (I tried poking around Gecko code but didn't see anything.) Regardless, I think this is a shoe-in for merging since the spec already allows such implementer freedom around these dialogs, and because we already allow truncation for beforeunload dialogs."},"comment":{"url":"https://api.github.com/repos/whatwg/html/issues/comments/186308290","html_url":"https://github.com/whatwg/html/pull/714#issuecomment-186308290","issue_url":"https://api.github.com/repos/whatwg/html/issues/714","id":186308290,"user":{"login":"annevk","id":1544111,"avatar_url":"https://avatars.githubusercontent.com/u/1544111?v=3","gravatar_id":"","url":"https://api.github.com/users/annevk","html_url":"https://github.com/annevk","followers_url":"https://api.github.com/users/annevk/followers","following_url":"https://api.github.com/users/annevk/following{/other_user}","gists_url":"https://api.github.com/users/annevk/gists{/gist_id}","starred_url":"https://api.github.com/users/annevk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/annevk/subscriptions","organizations_url":"https://api.github.com/users/annevk/orgs","repos_url":"https://api.github.com/users/annevk/repos","events_url":"https://api.github.com/users/annevk/events{/privacy}","received_events_url":"https://api.github.com/users/annevk/received_events","type":"User","site_admin":false},"created_at":"2016-02-19T17:09:44Z","updated_at":"2016-02-19T17:09:44Z","body":"Use a shared definition of \"truncate\" among all these places? Perhaps point out that offering to reveal all text in such a situation might not be a good idea (per Brandon's email). "}}