Closed Bug 2032359 Opened 5 months ago Closed 5 months ago

Sanitizer: Don't allow <svg> or <math> in replaceWithChildrenElements

Categories

(Core :: DOM: Security, task)

task

Tracking

()

RESOLVED FIXED
151 Branch
Tracking Status
firefox151 --- fixed

People

(Reporter: tschuster, Assigned: tschuster)

References

(Blocks 1 open bug, )

Details

(Keywords: dev-doc-complete)

Attachments

(1 file)

No description provided.
Assignee: nobody → tschuster
Status: NEW → ASSIGNED
Keywords: dev-doc-needed

Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/59319 for changes under testing/web-platform/tests

Status: ASSIGNED → RESOLVED
Closed: 5 months ago
Resolution: --- → FIXED
Target Milestone: --- → 151 Branch

Upstream PR merged by moz-wptsync-bot

FF151 work for this can be tracked in https://github.com/mdn/content/issues/43870

Note, chose not to do a compat data entry for the same reasons as we didn't add html not being allowed in release 151 (i.e. edge cases early in release of feature).

QA Whiteboard: [qa-triage-done-c152/b151]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: