1903717 - Implement default-policy support for Trusted Types

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P3)

Comment 1

[Frederik Braun [:freddy]]

Am I right to assign this to you, Mirko? (if not, please reset flags/whiteboard/assignee).

Comment 2

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Just filed this ticket for structuring the remaining work.

Comment 3

[Frederik Braun [:freddy]]

Remaining for whom?

Comment 4

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Remaining for the feature :-). Presumably to be implemented by me.

Comment 5

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Relevant test for Element.insertAdjacentHTML: https://searchfox.org/mozilla-central/rev/b1b87f95ecea00828298d1b3cd3d8718f9fcc3fc/testing/web-platform/tests/trusted-types/block-string-assignment-to-Element-insertAdjacentHTML.html#154.

Comment 6

[Frédéric Wang (:fredw)]

It's unclear to me whether it is useful to have a meta bug for the default policy specifically, given that the work is tracked by other meta bugs (injection sinks, pre-navig check, ...). After discussing with Mirko, he prefers to keep this open and suggested to use "see also" links instead.

Comment 7

[Frédéric Wang (:fredw)]

I believe this can be considered fixed after bug 1928932.