Luke Warlow

I'm not 100% sure on the exact use case you have but https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API it might be worth looking into the trusted types API and integrating with that inside of Preact,...

Math being the root element name for the MathML namespace makes me lean towards math as the tagged template name too fwiw.

Something else mentioned in that thread but I think is worth reiterating here. The precedent was actually set by that being Safari's (desktop at least) current behaviour. There's no "All...

I've recently come across the limitations with this cross-root popover API, it would be very nice if you could use the IDL to assign elements truly cross root. e.g. button...

> Adding invokertarget and invokeraction attributes to and / elements Bruce Lawson was trying popover out and noticed that because it's only on "button"s it doesn't work with `` and...

Hmm, so is there an alternative that's possible atm or would it be a matter of positioning buttons manually? At the very least it's worth specifying `interesttarget` would work for...

Fwiw showPicker only works in same origin iframes. That should help alleviate some security concerns? Given you already don't need any JS to trigger them(you can just use and style...

> I don't quite follow the claim about "same origin iframes". In general, x-origin DOM access isn't allowed, so none of the things here would be possible x-origin without some...

To keep this issue updated the security concerns were discussed within OpenUI see the transcript here https://github.com/openui/open-ui/issues/904 The TLDR is we don't consider invokers to introduce anything novel that warrants...

One thing to note is that the behaviour difference for default policy call is actually aligning with the shipping implementation (Chromium)