Ecosyste.ms: Issues
An open API service for providing issue and pull request metadata for open source projects.
GitHub / w3c/trusted-types issues and pull requests
#549 - WPTs for pre-navigation check of form-submission should be added
Issue -
State: open - Opened by mbrodesser-Igalia 2 months ago
- 1 comment
#548 - "pre-navigation check" uses "request’s clients's global object" which is null
Issue -
State: open - Opened by mbrodesser-Igalia 2 months ago
- 1 comment
#547 - Add WPT for "create navigation params by fetching" step 19.3
Issue -
State: closed - Opened by mbrodesser-Igalia 2 months ago
- 4 comments
#546 - Update LICENSE.md
Pull Request -
State: closed - Opened by Johnbad2000 2 months ago
- 1 comment
#545 - Export the two CSP directives
Pull Request -
State: open - Opened by lukewarlow 3 months ago
- 1 comment
#544 - Remove CSP dynamic code compilation block
Pull Request -
State: closed - Opened by lukewarlow 3 months ago
#543 - https://html.spec.whatwg.org/#dom-range-createcontextualfragment should pass "'script'"
Issue -
State: open - Opened by mbrodesser-Igalia 3 months ago
Labels: spec
#542 - "Get Trusted Type compliant string" is called with "script" instead of "'script'"
Issue -
State: open - Opened by mbrodesser-Igalia 3 months ago
- 1 comment
Labels: spec
#541 - "stringifying" in "Process value with a default policy" needs to be defined
Issue -
State: open - Opened by mbrodesser-Igalia 3 months ago
- 1 comment
Labels: spec
#540 - How can policyValue be 'undefined'?
Issue -
State: open - Opened by smaug---- 4 months ago
- 2 comments
#539 - Strip "function anonymous" prefixes from Function samples
Pull Request -
State: closed - Opened by lukewarlow 4 months ago
#538 - Export the 'require-trusted-types-for' dfn
Issue -
State: open - Opened by robbiemc 4 months ago
#537 - Does the DOM spec really need to special case script elements for replaceChildren etc.
Issue -
State: open - Opened by lukewarlow 4 months ago
- 3 comments
Labels: spec
#536 - Should the default policy be invoked when trusted types are not required?
Issue -
State: open - Opened by mbrodesser-Igalia 4 months ago
- 4 comments
#535 - Should the APIs for creating a TrustedScript etc return a frozen object?
Issue -
State: open - Opened by lukewarlow 5 months ago
- 1 comment
Labels: spec
#534 - Should "Get Trusted Type compliant string" check `isHTML`/`isScript`/`isScriptURL`?
Issue -
State: open - Opened by mbrodesser-Igalia 5 months ago
#533 - Change Script Enforcement Mechanism to use flags
Pull Request -
State: open - Opened by lukewarlow 5 months ago
- 3 comments
#532 - Is "code updating a script before it finishes parsing" within the threat model of Trusted Types?
Issue -
State: closed - Opened by lukewarlow 5 months ago
- 4 comments
#531 - Should the `trusted-types` CSP directive support the `report-sample` keyword?
Issue -
State: closed - Opened by mbrodesser-Igalia 5 months ago
- 7 comments
#530 - Add WPT that `createPolicy` which violates the `trusted-types` CSP directive fires a violation event for Windows (not Workers)
Issue -
State: open - Opened by mbrodesser-Igalia 5 months ago
- 1 comment
#529 - Update `<wpt>` block
Pull Request -
State: closed - Opened by lukewarlow 5 months ago
#528 - Update TrustedTypePolicyOptions usages to use map syntax.
Pull Request -
State: closed - Opened by lukewarlow 5 months ago
#527 - Handle null policyValue in Create a Trusted Type
Pull Request -
State: closed - Opened by lukewarlow 5 months ago
#526 - Add WPTs for `report-uri` with Workers
Issue -
State: open - Opened by mbrodesser-Igalia 5 months ago
#525 - Script element mid-parse protection mechanism
Issue -
State: open - Opened by lukewarlow 6 months ago
- 10 comments
Labels: spec
#524 - Add script protection mechanisms to SVGScriptElement
Pull Request -
State: closed - Opened by lukewarlow 6 months ago
- 3 comments
#523 - Remove HostEnsureCanCompileStrings and HostGetCodeForEval
Pull Request -
State: closed - Opened by lukewarlow 6 months ago
#522 - Remove timer integration block
Pull Request -
State: closed - Opened by lukewarlow 6 months ago
#521 - getPropertyType and SVGScriptElement href baseVal property
Issue -
State: open - Opened by lukewarlow 6 months ago
- 2 comments
Labels: spec
#520 - Finalise spec mechanism for event handlers
Issue -
State: open - Opened by lukewarlow 6 months ago
- 8 comments
Labels: spec
#519 - Seeking Trusted Types feedback on Array.isTemplateObject
Issue -
State: open - Opened by littledan 6 months ago
- 5 comments
#518 - Add an |includeReportOnly| boolean argument to Does sink type require trusted types?
Pull Request -
State: open - Opened by lukewarlow 6 months ago
#517 - Should all 3 script IDL setters change the associated script text value identically
Issue -
State: open - Opened by lukewarlow 6 months ago
- 11 comments
Labels: spec
#516 - Replace timer functions section with upstream PR link
Pull Request -
State: closed - Opened by lukewarlow 7 months ago
#515 - Remove links to merged upstream PRs
Pull Request -
State: closed - Opened by lukewarlow 7 months ago
#514 - Replace EnsureCSPDoesNotBlockStringCompilation section with link to upstream PR
Pull Request -
State: closed - Opened by lukewarlow 7 months ago
- 2 comments
#513 - Add WPTs for CSP `sandbox allow-scripts` combined with Trusted Types
Issue -
State: open - Opened by mbrodesser-Igalia 7 months ago
- 2 comments
#512 - Should SVGScriptElement have an IDL way to set a trusted script value?
Issue -
State: open - Opened by lukewarlow 7 months ago
- 2 comments
Labels: spec
#511 - "Create a Trusted Type Policy" should specify the TypeError messages
Issue -
State: closed - Opened by mbrodesser-Igalia 7 months ago
- 3 comments
#510 - Spec / implementation mismatch with document.write/writeln
Issue -
State: closed - Opened by lukewarlow 7 months ago
- 8 comments
Labels: spec
#508 - WPT for CSP header `trusted-types 'none' 'none'` missing
Issue -
State: closed - Opened by mbrodesser-Igalia 7 months ago
- 9 comments
Labels: spec
#507 - Script element protection model
Issue -
State: open - Opened by lukewarlow 7 months ago
- 2 comments
#506 - Link to spec PRs for in-progress upstreams
Pull Request -
State: closed - Opened by lukewarlow 7 months ago
#505 - faq.md outdated
Issue -
State: closed - Opened by lukewarlow 7 months ago
- 1 comment
#504 - `createPolicy`'s permitted policy names are inconsistent with CSP's permitted policy names
Issue -
State: open - Opened by mbrodesser-Igalia 7 months ago
- 5 comments
Labels: spec
#503 - Fix links to innerHTML property.
Pull Request -
State: closed - Opened by lukewarlow 7 months ago
#502 - Update slots
Pull Request -
State: closed - Opened by lukewarlow 7 months ago
- 2 comments
#501 - Update spec to match latest ECMA262 proposal shape.
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
#500 - `execCommand` spec won't work
Issue -
State: closed - Opened by lukewarlow 8 months ago
- 7 comments
Labels: spec
#499 - Update HTML Parser steps for script element to set "script text"
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
#498 - Remove StringContext attribute
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
#497 - Fix type issue between get tt compliant string and validate string in context
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
- 1 comment
#496 - Check variable naming inside of getAttributeType and getPropertyType methods
Issue -
State: open - Opened by lukewarlow 8 months ago
Labels: spec
#495 - Remove outdated event handler section
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
#494 - Improve test coverage of sink values
Issue -
State: open - Opened by lukewarlow 8 months ago
- 1 comment
#493 - Make sink an argument to get tt compliant attribute value
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
- 1 comment
#492 - Get trusted type compliant attribute value sink
Issue -
State: closed - Opened by lukewarlow 8 months ago
- 1 comment
#491 - CSP sample for eval and Function
Issue -
State: closed - Opened by lukewarlow 8 months ago
- 8 comments
Labels: spec
#490 - Add missing HostEnsureCanCompileStrings monkeypatch
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
#489 - Remove changes upstreamed to DOM Parsing
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
#488 - "Validate the string in context" takes any value and calls "Get Trusted Type compliant string" which requires a TrustedType or a string
Issue -
State: closed - Opened by mbrodesser-Igalia 8 months ago
- 12 comments
#487 - Remove changes upstreamed to SVG
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
#486 - Remove enforcement from embed and object elements
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
- 5 comments
#485 - Remove IDL changes upstreamed to HTML
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
#484 - Update IDL for script enforcement
Pull Request -
State: closed - Opened by lukewarlow 8 months ago
- 8 comments
#483 - SVGScriptElement needs TT protection too
Issue -
State: open - Opened by lukewarlow 8 months ago
#482 - Callback IDL types
Issue -
State: closed - Opened by lukewarlow 8 months ago
- 2 comments
Labels: spec
#481 - Update handling of timer functions
Pull Request -
State: closed - Opened by lukewarlow 9 months ago
- 2 comments
#480 - HTML timers as specced won't work
Issue -
State: closed - Opened by lukewarlow 9 months ago
- 2 comments
Labels: bug, spec
#476 - [Meta] Upstream changes
Issue -
State: open - Opened by lukewarlow 9 months ago
- 2 comments
#474 - Event handler enforcement section wrong
Issue -
State: closed - Opened by lukewarlow 9 months ago
- 1 comment
#473 - Add new `trusted-eval` source expression to 'script-src' directive.
Pull Request -
State: closed - Opened by lukewarlow 9 months ago
- 3 comments
Labels: spec
#469 - Stringification of TrustedHTML with `null`-data needs to be specified
Issue -
State: open - Opened by mbrodesser-Igalia 9 months ago
- 21 comments
#463 - Missing test for SVG href and getAttributeType function
Issue -
State: closed - Opened by lukewarlow 9 months ago
- 1 comment
#461 - Can we drop the default policy value changing from Eval, new Function() (and other usages of the dynamic code brand checks proposal)?
Issue -
State: closed - Opened by lukewarlow 9 months ago
- 16 comments
#460 - Fix IDL of getAttributeType and getPropertyType
Pull Request -
State: closed - Opened by lukewarlow 9 months ago
- 2 comments
#458 - Function constructor and default policy
Issue -
State: closed - Opened by lukewarlow 9 months ago
- 4 comments
#457 - Rewrite metadata functions
Pull Request -
State: closed - Opened by lukewarlow 9 months ago
- 5 comments
#456 - `getPropertyType()` needs a rewrite?
Issue -
State: closed - Opened by lukewarlow 9 months ago
#453 - Add example for CSP header with `'none'`
Pull Request -
State: open - Opened by mbrodesser-Igalia 9 months ago
#452 - Consider deleting the master branch as it's superseded by the main branch
Issue -
State: closed - Opened by mbrodesser-Igalia 9 months ago
- 1 comment
#451 - Is there a convenient way to see the rendered diff a spec PR?
Issue -
State: closed - Opened by mbrodesser-Igalia 9 months ago
#450 - Extract `Does sink type require trusted types?` to its own algorithm
Pull Request -
State: closed - Opened by lukewarlow 9 months ago
- 6 comments
#449 - Add test to <block-string-assignment-to-Element-setAttribute.html> which checks trusted types can be assigned to non-injection sinks
Issue -
State: open - Opened by mbrodesser-Igalia 9 months ago
- 2 comments
#448 - Add test for `setAttributeNS` with an event handler
Issue -
State: open - Opened by mbrodesser-Igalia 9 months ago
#447 - <Element-setAttributeNS.html> contains commented out test and seems to duplicate other tests
Issue -
State: open - Opened by mbrodesser-Igalia 9 months ago
#446 - Remove superfluous condition
Pull Request -
State: closed - Opened by lukewarlow 9 months ago
#445 - Update dynamic code compilation support
Pull Request -
State: open - Opened by lukewarlow 9 months ago
#444 - Should the polyfill be moved?
Issue -
State: open - Opened by lukewarlow 9 months ago
Labels: polyfill
#443 - Remove pre-commit hooks
Pull Request -
State: closed - Opened by lukewarlow 9 months ago
#442 - Integration with Shadow Realms?
Issue -
State: open - Opened by lukewarlow 9 months ago
- 5 comments
#441 - Integration with DOM Parts API
Issue -
State: open - Opened by lukewarlow 9 months ago
#440 - Add missing IDL changes to Parent and Child Node mixins from dom spec
Pull Request -
State: closed - Opened by lukewarlow 9 months ago
- 14 comments
#439 - Make gitignore more exhaustive
Pull Request -
State: closed - Opened by lukewarlow 9 months ago
#438 - Integration with DOM APIs
Issue -
State: closed - Opened by lukewarlow 9 months ago
- 1 comment
Labels: spec
#437 - Issue with script enforcement
Issue -
State: closed - Opened by lukewarlow 9 months ago
- 14 comments
Labels: bug, spec
#436 - Rename prepare script url and text algorithm
Pull Request -
State: closed - Opened by lukewarlow 9 months ago
#435 - "Prepare the script URL and text" algorithm badly named
Issue -
State: closed - Opened by lukewarlow 9 months ago
#434 - Should the "default" policy be called when `setAttributeNode` is called with a node from the same realm?
Issue -
State: closed - Opened by mbrodesser-Igalia 10 months ago
- 3 comments