[AI Help] Question: Which version of Firefox supports Trusted Types?

zcorpan commented 7 months ago

What is the issue with the answer?

It appears AI Help doesn't consult BCD (browser-compat-data), which are the support tables on MDN pages. Or at least, it's not able to answer correctly about browser support.

The consulted MDN pages for the second question are not relevant since they don't mention Trusted Types.

How would you categorize this issue?

[ ] The answer is harmful / unsafe.
[X] The answer is not correct.
[ ] The answer is not helpful.
[ ] The answer is outdated.

What did you ask?

Are Safari and Firefox planning on supporting Trusted Types?
Which version of Firefox supports Trusted Types?

What did AI Help answer?

(Modified to include both answers, not just the last answer.)

First question

As of now, Trusted Types is supported in Firefox, but there is no official documentation on Trusted Types support in Safari. You can keep an eye on the official documentation for Safari updates regarding Trusted Types support. For more information on Trusted Types in Firefox, you can refer to the MDN documentation on Trusted Types API.

Second question

Trusted Types is a web platform feature that aims to prevent DOM-based cross-site scripting (XSS) attacks by enforcing a strong policy for the types of values that can be used in certain contexts. As of my knowledge cutoff date in September 2021, Trusted Types is supported in Firefox 68 and later versions. You can find more information about Trusted Types and its browser support on the MDN web docs page for Trusted Types. For the most up-to-date information, I recommend checking the latest browser release notes and official documentation.

What MDN pages did AI Help consult?

First question

Second question

LeoMcA commented 7 months ago

Nice catch! It looks like this is happening because, currently, the https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API page doesn't show any BCD data. I've opened a PR in content to fix this: https://github.com/mdn/content/pull/31782

Once merged, and after a nightly deploy, AI Help should be able to answer about browser compatibility questions about Trusted Types properly.

zcorpan commented 4 months ago

I asked again. The responses are still wrong, it claims Firefox support from 68, but it's not implemented yet (and BCD in https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API says it's not implemented in Safari or Firefox).

Are Safari and Firefox planning on supporting Trusted Types?

Consulted MDN content:

Answer:

Both Safari and Firefox have plans to support Trusted Types, a security feature that helps prevent cross-site scripting attacks by enforcing a strong policy for safe string handling.

Safari: As of now, there is no specific information available on Safari's official documentation regarding Trusted Types support. However, you can keep an eye on the WebKit project for any updates on Trusted Types implementation in Safari.
Firefox: Firefox has already implemented support for Trusted Types. You can refer to the MDN documentation on Trusted Types for detailed information on how Firefox supports this security feature.

For the most up-to-date information, it's recommended to check the official documentation and release notes for both browsers.

Which version of Firefox supports Trusted Types?

Consulted MDN content:

Answer:

Trusted Types is a web platform feature aimed at preventing DOM-based Cross-Site Scripting (XSS) attacks by enforcing a strong policy for string-based APIs. As of my last update, Trusted Types are supported in Firefox version 68 and later. You can find more information about Trusted Types and their implementation in Firefox on the MDN web docs page.

mdn / ai-feedback