Simon Pieters
Simon Pieters
Web Almanac: https://docs.google.com/spreadsheets/d/1T5oVAVmcH3sM6R-WwH4ksr2jFtPhuLXs3-iXXoABb3E/edit#gid=1515756004 - though `poster` appears multiple times and I'm not sure how to interpret `pct_attribute` and `pct_videos`. @eeeps can you help? Chromium use counter [V8HTMLVideoElement_Poster_AttributeGetter](https://chromestatus.com/metrics/feature/timeline/popularity/1815) is at 2.1123%...
I discussed with @chrishtr, he said supporting `picture` might be too much complexity. But supporting `img` still gives srcset, alt, and other features of `img`. @emilio wrote > ```html ......
Reopening to track fixing the test expectation or changing helpers.js as @arai-a suggested.
The `img` element is like the "last" `source` element. Why should `srcset` be optional? Should it be optional on `source` as well? What's the use case?
Thanks, that seems reasonable. The original motivation to require `src` was to act as fallback for UAs that don't support `srcset` or `picture`. Now we have made the call that...
My suspicion is that it's entirely unsupported, but `src` or `srcset` being required would be equally problematic.
HTML has non-normative suggestions: https://html.spec.whatwg.org/multipage/tables.html#the-table-element:~:text=User%20agents%2C%20especially,given%20this%20attribute)
@SelenIT are there known mutation XSS exploits with parsing modes that don't also use "" in an attribute value?
I think this change is a good idea and is probably doable. The main unknown is the web compat risk. In 2008, all browsers except IE escaped "" in attribute...