1914372 - Implement Trusted Types support for `Element.innerHTML` without default-policy support

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P3)

Comment 1

[Mirko Brodesser (:mbrodesser-Igalia), offline until 10th of Feb]

Attachment: Bug 1914372: part 2) Add `TrustedHTML` to the interface of `Element.innerHTML`. r=smaug!,peterv!

Comment 2

[Mirko Brodesser (:mbrodesser-Igalia), offline until 10th of Feb]

Attachment: Bug 1914372: part 1) Move `GetTrustedTypesCompliantString` and related functions to `TrustedTypeUtils`. r=smaug

<Element.cpp> already contains around 5000 lines, it doesn't need more.
GetTrustedTypeCompliantString requires further extension which will be
implemented in separate patches.

Comment 3

[Mirko Brodesser (:mbrodesser-Igalia), offline until 10th of Feb]

Sarah: as you mentioned you prefer ni?-requests, can you PTAL at https://phabricator.services.mozilla.com/D219876#7612418?

Comment 4

[Sarah Clements [:sclements]]

(In reply to Mirko Brodesser (:mbrodesser-Igalia) from comment #3)

Sarah: as you mentioned you prefer ni?-requests, can you PTAL at https://phabricator.services.mozilla.com/D219876#7612418?

Thanks, I've delegated this to :afarre and added him as a reviewer.

Comment 5

[Mirko Brodesser (:mbrodesser-Igalia), offline until 10th of Feb]

Andreas: could you PTAL at the pending review [1]? [2] contains context which might ease reviewing.

[1] https://phabricator.services.mozilla.com/D219876
[2] https://phabricator.services.mozilla.com/D219876#7612418

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/7e3f7117bf84
part 1) Move `GetTrustedTypesCompliantString` and related functions to `TrustedTypeUtils`. r=smaug
https://hg.mozilla.org/integration/autoland/rev/703d702702f3
part 2) Add `TrustedHTML` to the interface of `Element.innerHTML`. r=smaug,peterv,farre

Comment 7

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/7e3f7117bf84
https://hg.mozilla.org/mozilla-central/rev/703d702702f3