trusted-types

trusted-types copied to clipboard

I know the script enforcement is currently in the HTML integrations section but we need to update it (possibly move the whole section?) to include coverage of the SVGScriptElement. At...

lukewarlow

https://w3c.github.io/trusted-types/dist/spec/#abstract-opdef-should-trusted-type-policy-creation-be-blocked-by-content-security-policy, step 2.8, Fix: pass directive's name.

mbrodesser-Igalia

Script element protection model

2

This issue is to discuss the model for protecting script elements, in the spec we have a mostly finalised idea for protecting them (except during parsing which needs work). However,...

lukewarlow

Improve test coverage of sink values

1

We should ensure that we have exhaustive coverage of the "sink" value, this is the prefix for violation object samples, aswell as being one of the arguments for the default...

lukewarlow

Callback IDL types

1

Random thought I had while cleaning up some work in WebKit, does it actually make sense for the callbacks to have their own IDL type per callback? Each callback type...

lukewarlow

Ensure spec PR's diffs are generated correctly

5

See https://github.com/w3c/trusted-types/pull/450#issuecomment-1959704840.

mbrodesser-Igalia