[webkit-changes] [WebKit/WebKit] 4dad72: Trusted Types default callback allows Attr node in...

[Luke Warlow]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 4dad722e68b54ae7d38cd91dac521310e18417a8
      https://github.com/WebKit/WebKit/commit/4dad722e68b54ae7d38cd91dac521310e18417a8
  Author: Luke Warlow <lwarlow at igalia.com>
  Date:   2025-02-18 (Tue, 18 Feb 2025)

  Changed paths:
    M LayoutTests/imported/w3c/web-platform-tests/trusted-types/modify-attributes-in-callback-expected.txt
    M LayoutTests/imported/w3c/web-platform-tests/trusted-types/modify-attributes-in-callback.html
    M Source/WebCore/dom/Element.cpp

  Log Message:
  -----------
  Trusted Types default callback allows Attr node in multiple Elements at once
https://bugs.webkit.org/show_bug.cgi?id=287158

Reviewed by Anne van Kesteren.

This patch addresses this issue by re-validating that the Attr node
isn't on an element, or is on the correct element, after default callback is called.

* LayoutTests/imported/w3c/web-platform-tests/trusted-types/modify-attributes-in-callback-expected.txt:
* LayoutTests/imported/w3c/web-platform-tests/trusted-types/modify-attributes-in-callback.html:
* Source/WebCore/dom/Element.cpp:
(WebCore::Element::setAttributeNode):
(WebCore::Element::setAttributeNodeNS):

Canonical link: https://commits.webkit.org/290543@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications