1956731 - Implement forgiving parsing for require-trusted-types-for directive

Status: RESOLVED FIXED

(Core :: DOM: Security, enhancement)

Description

[Frédéric Wang Nélar]

This is the same as bug 1935434, but for require-trusted-types.

Luke reported https://github.com/w3c/trusted-types/issues/580 and is concerned this could be a compat issue.

Comment 1

[Frédéric Wang Nélar]

The ABNF is https://w3c.github.io/trusted-types/dist/spec/#require-trusted-types-for-csp-directive

Also our code assumes there is only one trusted-types-sink-group-keyword so we cannot repeat things like in 'script' 'script'

Comment 2

[Frédéric Wang Nélar]

Attachment: Bug 1956731 - Implement forgiving parsing for require-trusted-types-for directive. r=smaug

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/2882613aed1c
Implement forgiving parsing for require-trusted-types-for directive. r=smaug

Comment 4

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/51697 for changes under testing/web-platform/tests

Comment 5

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/2882613aed1c

Comment 6

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Upstream PR merged by moz-wptsync-bot