[wpt-sync] Sync PR 16410 - [Animation Worklet] Use document from script state instead of the animated target
Categories
(Testing :: web-platform-tests, defect, P4)
Tracking
(firefox69 fixed)
| Tracking | Status | |
|---|---|---|
| firefox69 | --- | fixed |
People
(Reporter: wpt-sync, Unassigned)
References
()
Details
(Whiteboard: [wptsync downstream])
Sync web-platform-tests PR 16410 into mozilla-central (this bug is closed when the sync is complete).
PR: https://github.com/web-platform-tests/wpt/pull/16410
Details from upstream follow.
Yi Gu <yigu@chromium.org> wrote:
[Animation Worklet] Use document from script state instead of the animated target
By spec [1] the ctor of Worklet Animation should use the Document that is associated
with the window that is the current global object. However the code takes the Document
from the target of the first effect which is not spec-compliant. e.g. the target is an
iframe, In addition, there may be security risks behind it.[1] https://drafts.css-houdini.org/css-animationworklet/#creating-worklet-animation
Bug: 953466
Change-Id: I13ed9a44e5a77f359e4075f1bd147d7e7163804a
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1570628
Commit-Queue: Yi Gu \<yigu@chromium.org>
Reviewed-by: Majid Valipour \<majidvp@chromium.org>
Reviewed-by: Stephen McGruer \<smcgruer@chromium.org>
Cr-Commit-Position: refs/heads/master@{#653219}
|
Assignee | |
Comment 1•6 years ago
|
||
|
|
Assignee | |
Comment 2•6 years ago
|
||
|
|
Assignee | |
Comment 3•6 years ago
|
||
|
||
Comment 5•6 years ago
|
||
| bugherder | ||
Description
•