Frédéric Wang

actually reopening, since the exclusion list was not implemented

cc @physikerwelt who is more aware of the current status of Wikipedia.

Maybe related to https://bugzilla.mozilla.org/show_bug.cgi?id=1009582 ? Does that work better with https://addons.mozilla.org/en-US/firefox/addon/mathml-fonts/ ?

Maybe related to https://github.com/googlefonts/noto-fonts/issues/330 too

Thanks for the report. One would need to investigate a bit to understand what's happening, but note that Wikipedia and KaTeX websites insert the MathML source in the page so...

I believe referring to https://fetch.spec.whatwg.org/#http-scheme + https://w3c.github.io/webappsec-secure-contexts/#is-url-trustworthy would be enough. Note that there is already some explanation about why browsers may consider non-https URLs trustworthy on https://w3c.github.io/webappsec-secure-contexts/#implementation-considerations (albeit not for...

> Tests are written and can be reviewed and commented upon at: https://github.com/web-platform-tests/wpt/tree/master/trusted-types On https://github.com/whatwg/dom/pull/1268#issuecomment-2165953464 you mentioned the affected APIs are - setAttribute - setAttributeNS - Element.setAttributeNode - Element.setAttributeNodeNS -...

We probably also need tests: - Check what happens when we pass a trusted type, which is treated differently depending on whether the API accept a TrustedXXXOrString argument). - Check...

Just to be more explicit, I believe we have three categories of APIs: - Element.setAttribute/Element.setAttributeNS: It seems browsers agree to always successfully set the attribute in any case. If the...

@frivoal Thanks. I believe this was discussed elsewhere (probably https://github.com/w3c/csswg-drafts/issues/3775), but chromium's implementation purposely disagrees with the spec and AFAIK there is no plan to change the implementation. So indeed...