Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

(meta) export concepts used in funky element handling #154

Open
mozfreddyb opened this issue Jun 10, 2022 · 1 comment
Open

(meta) export concepts used in funky element handling #154

mozfreddyb opened this issue Jun 10, 2022 · 1 comment
Assignees
Milestone

Comments

@mozfreddyb
Copy link
Collaborator

This is a meta bug for a couple of issues, that we need to fix elsewhere before we can resolve on our end.

  • template content is not exported in HTML
  • the HTMLHyperLinkElementUtils protocol property is also not properly exported. Also, the protocol getter steps are hairy and need to be moved into its own algorithm, and then we can refer that.
  • For the form action case we need to invoke the URL parser ourselves. I think matching on something like javascript: text might not work due to encoding stuff (not entirely sure here).
  • The form action is the URL of the document, when empty. Are we OK with this? Do we want to think about the case of javascript documents here? I'd prefer not to, but mentioning for posterity :)
@annevk annevk added the v1 label Oct 18, 2023
@mozfreddyb mozfreddyb added this to the v1 milestone Jan 23, 2024
@mozfreddyb mozfreddyb reopened this Apr 17, 2024
@mozfreddyb
Copy link
Collaborator Author

Most of the above should be resolved by previous work. What's left is:

The form action is the URL of the document, when empty. Are we OK with this? Do we want to think about the case of javascript documents here? I'd prefer not to, but mentioning for posterity :)

In the meeting, we agreed that we can't help that much once the user is in a javascript: document, given that all relative URLs in e.g., href are similarly dangerous. We should add a note to that effect.

@mozfreddyb mozfreddyb removed the v1 label Apr 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants