-
The TUF spec is written in a prose form, especially the update workflow. One of the challenges with this that we have duplicated paragraphs that describe essentially the same thing. For example:
> …
-
Part of this is tracked by #5168 where I think we have good solutions for initial about:blank. #4916 tracks this for COEP.
`data:` cannot work as it's not a secure context.
`about:blank` and `bl…
-
The validator doesn't validate some valid URLs.
To check, go to http://jquerytools.org/demos/validator/index.htm then enter the following URLs for the website field:
1. http://ar.wikipedia.org/wiki/أ…
-
What happens if authors try to parse things like
1. `"oklch(50% 10% var(--hue))`
2. `"oklch(50% 10% calc(0 + 20))`
3. `"color-mix(in oklab, currentColor, red)"`
The Color API is not Typed OM,…
-
``` sh
❯ phonegap serve
[phonegap] starting app server...
[phonegap] listening on 192.168.10.1:3000
[phonegap] listening on 192.168.2.1:3000
[phonegap]
[phonegap] ctrl-c to stop the server
[phonegap]
…
-
## Expected/Desired Behavior
vip commands without warnings
## Actual Behavior
```
matt@kurosawa ~> vip whoami
(node:59820) [DEP0040] DeprecationWarning: The `punycode` module is deprecated.…
-
The tests in [data-uri.htm](https://github.com/w3c/web-platform-tests/blob/master/XMLHttpRequest/data-uri.htm) use URLs with unescaped spaces. Consider using percent escaping so that the handling of i…
-
Remove `ent` & `@types/ent` dependencies - they do not seem necessary given the context of its usage.
Perhaps [`decodeURI`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global…
-
When having set the `TRUSTED_PROXIES` and `TRUSTED_HOSTS`, generated URLs will use the URL provided by the `X-FORWARDED-HOST` header when fetching a page through the API (e.g. in a `text_editor' conte…
-
[This](https://gist.github.com/jdm/e9ddf21af8c3151a859d63e6035fa21b) is a patch that I wrote which makes the following code easier to debug:
```js
some_element.setAttribute('onclick', '/* some inlin…