Active Development Information

Active Development Information

This is where you can find reasonings to why some things are included or left out. It's also important to challenge various aspects that can impact security. Please do reference and query anything that may be of concern.

Empty Non-boolean attributes are not removed

Because xk pre-generates a makup-string in the sandbox-DOM, the tree-walker is only showing valid markup attributes. Therefore empty attributes do not need to be checked for danger as they are already validated by the sandbox DOM.

xssKillah as a partially applied function

Partially applied functions are typically less resource hungry. This will need to be benchmarked.