1886209 - Is `[StringContext=Trusted...]` support required for `ObservableArray`s?

Status: RESOLVED INVALID

(Core :: DOM: Security, task)

Description

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

https://searchfox.org/mozilla-central/search?q=ObservableArray&path=*.webidl&case=true&regexp=false

That is, ObservableArray is currently only used by test-code and https://searchfox.org/mozilla-central/rev/6a2a2a52d7e544a2fd5678d04991a7e78b694f22/dom/webidl/DocumentOrShadowRoot.webidl#45-47 which mentions to use FrozenArray instead.

Comment 1

[Peter Van der Beken [:peterv]]

The comment in DocumentOrShadowRoot.webidl is just obsolete (since bug 1766227).

If the question is whether T in ObservableArray<T> can possibly be a string with [StringContext], then I think we shouldn't support that for now no matter what (and probably throw an error from the parser if someone does that).

I'm not sure opening a bug is the best way to ask us questions like this.

Comment 2

[Peter Van der Beken [:peterv]]

I think this covered in the spec by The [StringContext] extended attribute may only annotate a type of a regular attribute or a regular operation argument. So I'm reading that as the immediate type of the attribute or argument, not an inner type of it.

Comment 3

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

(In reply to Peter Van der Beken [:peterv] from comment #1)

The comment in DocumentOrShadowRoot.webidl is just obsolete (since bug 1766227).

If the question is whether T in ObservableArray<T> can possibly be a string with [StringContext], then I think we shouldn't support that for now no matter what (and probably throw an error from the parser if someone does that).

I'm not sure opening a bug is the best way to ask us questions like this.

Which alternative channel do you prefer?

Edit: feel free to let me know via e-mail.

Comment 4

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

(In reply to Peter Van der Beken [:peterv] from comment #2)

I think this covered in the spec by The [StringContext] extended attribute may only annotate a type of a regular attribute or a regular operation argument. So I'm reading that as the immediate type of the attribute or argument, not an inner type of it.

Agreed. Thanks for pointing that out.