Write a test that explicitly checks matching of browser behavior. False negatives are bad. Scripts should not leak through.
Another node. If I am setting baseURI, then anchor.href property is now properly initialized and I believe will have the javascript: protocol set somewhere in one of its properties, because it implements some kind of url interface.
jfroelich
commented
5 years ago
Write a test that explicitly checks matching of browser behavior. False negatives are bad. Scripts should not leak through.
Another node. If I am setting baseURI, then anchor.href property is now properly initialized and I believe will have the javascript: protocol set somewhere in one of its properties, because it implements some kind of url interface.