2070497 - Enable `dom.security.sanitizer.while-parsing` in nightly builds

Status: RESOLVED FIXED

(Core :: DOM: Security, task)

Comment 1

[Keith Cirkel [:keithamus]]

Attachment: Bug 2070497 - Enable sanitize while parsing in nightly builds r?hsivonen,tschuster

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/47f12fb37f2d
https://hg.mozilla.org/integration/autoland/rev/fc42210025fa
Enable sanitize while parsing in nightly builds r=hsivonen

Comment 3

[amarc]

https://hg.mozilla.org/mozilla-central/rev/fc42210025fa

Comment 4

[Sebastian Zartner [:sebo]]

I believe, this is something that should be mentioned in the Nightly release notes. Keith, please correct the wording if I interpreted this feature incorrectly. If they're ok, the relnote request should also be done for bug 2070498.

[Why is this notable]: Improves the Sanitizer API
[Affects Firefox for Android]: yes
[Suggested wording]: Starting with Firefox 158, the Sanitizer API in Firefox Nightly builds sanitizes while parsing rather than the reified tree, extending sanitizing to scoped registries and declarative shadow roots.
[Links (documentation, blog post, etc)]:
https://developer.mozilla.org/en-US/docs/Web/API/HTML_Sanitizer_API
https://groups.google.com/a/mozilla.org/g/dev-platform/c/VOccetYAF9s/m/ISX_5Z-GDAAJ

Sebastian

Comment 5

[Keith Cirkel [:keithamus]]

Thanks Sebastian, those notes look good to me.