1676333 - [meta] add support for restricted subset of HTML

Status: VERIFIED FIXED

(Firefox Graveyard :: Pioneer, enhancement)

Description

[Robert Helmer [:rhelmer]]

The only formatting about:ion currently supports are line-feeds which get translated into bullet points, supporting a strict subset of HTML would be better.

For instance:
bold/emphasis
bullet points and ordered lists
links
[...]

We've investigated a few other options:

1. frames (either iframe or <browser>) - getting the security settings correct here is tough, and the CSS layout as well.
2. markdown parser. adding this in-tree feels riskier at this stage
3. having study partners display their own form. this makes the onboarding experience pretty rocky.

The implementation I've been working on does takes output from remote-settings (which uses content signatures) and then uses DOMParser and creates a brand-new DOM tree, only copying over an allow-list of tag names and attributes. The textContent of each node is transferred over as well.

Comment 1

[Robert Helmer [:rhelmer]]

Attachment: Bug 1676333 - restricted HTML support for Ion

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/afd7ba1670b0
restricted HTML support for Ion r=Dexter,freddyb

Comment 3

[Dorel Luca [:dluca]]

https://hg.mozilla.org/mozilla-central/rev/afd7ba1670b0