07:51 | <zcorpan> | annevk: wdyt about https://github.com/w3c/editing/issues/419#issuecomment-2863306712 |
10:44 | <smaug> | Luke Warlow: is there some pending patch somewhere to define "Enforcement for scripts" ? I'm missing to find where it is defined how it all should work when it comes to adding new dom nodes |
10:46 | <Luke Warlow> | There's https://w3c.github.io/trusted-types/dist/spec/#prepare-script-text and https://w3c.github.io/trusted-types/dist/spec/#slot-value-verification |
10:50 | <smaug> | ok, thanks |
10:52 | <smaug> | Just reviewing tons of tests fredw is adding. Apparently this has been all mostly untested so far |
11:00 | <Luke Warlow> | That's somewhat surprising to me there's definitely a few that mess with script elements. It's possible they were more oriented at the parser shenanigans than after parse. Though I imagine there's probably numerous ways to mess with script elements |
11:17 | <evilpie> | I think I remember looking at some related CSP tests before as well. |
14:19 | <smaug> | Alan Stearns: FWIW, tomorrow is a holiday in many countries in Europe, so OpenUI/WhatWG attendance might be a bit light |
15:37 | <Alan Stearns> | Thanks, the agenda looks fairly light. cwilso Chris Harrelson shall we keep on or cancel this one? |
15:38 | <Alan Stearns> | Luke Warlow: are you planning on attending? |
15:39 | <Luke Warlow> | I am yes, but if many others are not then we can cancel. |
16:33 | <annevk> | Noam Rosenthal: no? It's in the second block under https://whatpr.org/fetch/1647.html#fetch-groups |
16:34 | <annevk> | zcorpan: dunno, that we should prolly have figured all that out before adding the feature? 🙃 |
16:37 | <jarhar> | id like a review on this, all the checkboxes are done: https://github.com/whatwg/html/pull/11186 |
16:48 | <Noam Rosenthal> | Ah "reserved" rather than "reserve". Yea it should be in the quota section, I'll make the change |
16:50 | <Noam Rosenthal> | Done |