Search results

Do non JS scripts really need TT enforcement?

Status: Open.

#586 In w3c/trusted-types;

· lukewarlow opened on May 28, 2025

navigation requests blocked by require-trusted-types-for don't set a violation sample

Status: Open.

#584 In w3c/trusted-types;

· fred-wang opened on Apr 1, 2025

[meta] The build currently fails

Status: Open.

#582 In w3c/trusted-types;

· lukewarlow opened on Feb 25, 2025

CSP syntax for <code>require-trusted-types-for</code> should be forgiving

Status: Open.

#580 In w3c/trusted-types;

· lukewarlow opened on Feb 24, 2025

Clipping of violation’s sample to the 40 first characters

Status: Open.

#577 In w3c/trusted-types;

· fred-wang opened on Jan 23, 2025

mXSS: should <code>createHTML</code> get information about the context?

Status: Open.

#569 In w3c/trusted-types;

· mozfreddyb opened on Dec 20, 2024

Rely on WedIDL's "implements" definition for isHTML/isScript/isScriptURL?

Status: Open.

#566 In w3c/trusted-types;

· fred-wang opened on Dec 4, 2024

"pre-navigation check" uses "request’s clients's global object" which is null

Status: Open.

#548 In w3c/trusted-types;

· ghost opened on Sep 18, 2024

 ·  

v1

"stringifying" in "Process value with a default policy" needs to be defined

spec

Status: Open.

#541 In w3c/trusted-types;

· ghost opened on Aug 15, 2024

How can policyValue be 'undefined'?

Status: Open.

#540 In w3c/trusted-types;

· smaug---- opened on Aug 2, 2024

Should the APIs for creating a TrustedScript etc return a frozen object?

spec

Status: Open.

#535 In w3c/trusted-types;

· lukewarlow opened on Jul 11, 2024

 ·  

v1

Script element mid-parse protection mechanism

spec

Status: Open.

#525 In w3c/trusted-types;

· lukewarlow opened on Jun 12, 2024

 ·  

v1