| 06:40 | <MikeSmith> | igrigorik: style in body, as far as possible negative effects on perf, should the HTML spec continue to say author should no do it? |
| 06:40 | <MikeSmith> | can’t remember if we asked you about this before or not |
| 06:41 | <MikeSmith> | but please consider commenting at https://github.com/whatwg/html/pull/1606 if you have specific info you want to add there |
| 06:41 | <MikeSmith> | or alternatively at https://github.com/whatwg/html/issues/1605 |
| 11:23 | <smaug> | hmm, can CSP override sandbox flags ? |
| 11:24 | <smaug> | I hope not |
| 13:49 | <derkirche> | I don't understand how a style in body could be vulnerable to XSS/CSP... eval() maybe? |
| 14:05 | <mounir> | annevk: when you have time, can you have a look at https://github.com/WICG/mediasession/issues/148 ? :) |
| 14:22 | <annevk> | mounir: back Thursday |
| 15:45 | <tobie> | derkirche: some examples there, not sure which still apply to modern browsers, though: https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet#STYLE_sheet |
| 15:48 | <derkirche> | ah, I should've looked there first |
| 18:52 | <smaug> | hmm, should <dialog>'s showModal really not work in shadow DOM? |
| 19:04 | <Domenic> | smaug: it probably should work! |
| 19:04 | <Domenic> | smaug: remember "in a document" = "we haven't yet looked at this in detail" |
| 19:04 | <smaug> | Filed a chromium bug |
| 19:05 | <smaug> | since as usual, it is doing against the current spec when dealing with this kind of stuff |
| 19:05 | <Domenic> | Does it work in shadow DOM in chromium or not? |
| 19:05 | <smaug> | it does work |
| 19:05 | <Domenic> | OK then we should fix the spec |
| 19:05 | <smaug> | need to think a bit... |
| 19:05 | <smaug> | there is the stack of dialogs |
| 19:07 | <smaug> | allowing in Shadow DOM is probably ok |
| 19:08 | <smaug> | Domenic: https://bugs.chromium.org/p/chromium/issues/detail?id=674217 |
| 21:01 | <MikeSmith> | https://stackoverflow.com/questions/41081577/unchanged-service-worker-is-re-installing-and-re-caching |
| 23:28 | <gsnedders> | anyone know when the HTML parser was first added to WA1.0? |
| 23:28 | <gsnedders> | it's already there by the initial checkin to SVN |