-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Forbid data: and javascript: URLs in <base> #9665
Conversation
Also correct a minor mistake in the invocation of "Is base allowed for Document?". Tests: web-platform-tests/wpt#41731. Fixes #2249.
allowed for Document?</span> on the <span>resulting URL record</span> and <var>document</var> | ||
returns "<code data-x="">Blocked</code>", and to <var>urlRecord</var> otherwise.</p></li> | ||
<li> | ||
<p>If one of the following is true</p> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What if two of the following are true?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I thought when we used this construct the "at least" was implicit. Because if two are true, one of them is also true.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We usually say "if any of the following". I guess I will do a small PR to uniformize, since there are now 5 cases of "if one of".
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks, sounds good!
…in the <base> element, a=testonly Automatic update from web-platform-tests HTML: forbid data: and javascript: URLs in the <base> element For whatwg/html#9665. -- wpt-commits: 5dc33b806b23771e0003a9c5aecbcfa04baddada wpt-pr: 41731
…in the <base> element, a=testonly Automatic update from web-platform-tests HTML: forbid data: and javascript: URLs in the <base> element For whatwg/html#9665. -- wpt-commits: 5dc33b806b23771e0003a9c5aecbcfa04baddada wpt-pr: 41731
Also correct a minor mistake in the invocation of "Is base allowed for Document?".
Tests: web-platform-tests/wpt#41731.
Fixes #2249.
(See WHATWG Working Mode: Changes for more details.)
/semantics.html ( diff )