search

w3c / trusted-types

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
https://w3c.github.io/trusted-types/dist/spec/
Other
586 stars 68 forks source link

Remove StringContext attribute #498

Closed lukewarlow closed 2 weeks ago

lukewarlow commented 2 months ago

Swap to using a union type and updating the algorithms directly.

Need #457 merged first as this removes usages of StringContext

Corresponding HTML PR: https://github.com/whatwg/html/pull/10286 (https://github.com/whatwg/html/pull/10328)

Corresponding Sanitizer PR: https://github.com/WICG/sanitizer-api/pull/234

Preview | Diff