Open Bug 1513968 Opened 7 years ago Updated 3 years ago

Implement duplicate attribute flag on script elements

Categories

(Core :: DOM: Core & HTML, enhancement, P3)

Product:
Core
Component:
DOM: Core & HTML
Type:
enhancement

Tracking

()

Status:
UNCONFIRMED

People

(Reporter: andypaicu, Unassigned)

Details

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36 Expected results: After this PR https://github.com/whatwg/html/pull/4223, the <script> element will need to record in a flag whether a duplicate attribute was found during parsing. This flag is then used in this CSP check: https://w3c.github.io/webappsec-csp/#is-element-nonceable (after this PR lands: https://github.com/w3c/webappsec-csp/pull/377) WPT test: https://github.com/web-platform-tests/wpt/blob/master/content-security-policy/script-src/nonce-enforce-blocked.html
Priority: -- → P3
Component: DOM → DOM: Core & HTML
Severity: normal → S3
Type: defect → enhancement
You need to log in before you can comment on or make changes to this bug.