Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Forbid data: and javascript: URLs in <base> #9665

Merged
merged 1 commit into from
Aug 31, 2023
Merged

Conversation

annevk
Copy link
Member

@annevk annevk commented Aug 31, 2023

Also correct a minor mistake in the invocation of "Is base allowed for Document?".

Tests: web-platform-tests/wpt#41731.

Fixes #2249.

(See WHATWG Working Mode: Changes for more details.)


/semantics.html ( diff )

Also correct a minor mistake in the invocation of "Is base allowed for Document?".

Tests: web-platform-tests/wpt#41731.

Fixes #2249.
annevk added a commit to web-platform-tests/wpt that referenced this pull request Aug 31, 2023
@annevk annevk merged commit f44b31b into main Aug 31, 2023
@annevk annevk deleted the annevk/base-data-js branch August 31, 2023 14:20
allowed for Document?</span> on the <span>resulting URL record</span> and <var>document</var>
returns "<code data-x="">Blocked</code>", and to <var>urlRecord</var> otherwise.</p></li>
<li>
<p>If one of the following is true</p>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What if two of the following are true?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I thought when we used this construct the "at least" was implicit. Because if two are true, one of them is also true.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We usually say "if any of the following". I guess I will do a small PR to uniformize, since there are now 5 cases of "if one of".

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, sounds good!

moz-v2v-gh pushed a commit to mozilla/gecko-dev that referenced this pull request Sep 13, 2023
…in the <base> element, a=testonly

Automatic update from web-platform-tests
HTML: forbid data: and javascript: URLs in the <base> element

For whatwg/html#9665.
--

wpt-commits: 5dc33b806b23771e0003a9c5aecbcfa04baddada
wpt-pr: 41731
vinnydiehl pushed a commit to vinnydiehl/mozilla-unified that referenced this pull request Sep 14, 2023
…in the <base> element, a=testonly

Automatic update from web-platform-tests
HTML: forbid data: and javascript: URLs in the <base> element

For whatwg/html#9665.
--

wpt-commits: 5dc33b806b23771e0003a9c5aecbcfa04baddada
wpt-pr: 41731
Lightning00Blade pushed a commit to Lightning00Blade/wpt that referenced this pull request Dec 11, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

Restrict <base> to ~sane schemes.
3 participants