[Webkit-unassigned] [Bug 124128] [regression] foreign content not displayed in MathML

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=124128





--- Comment #16 from Frédéric Wang <fred.wang at free.fr>  2014-01-10 02:57:11 PST ---
My understanding is that the parser allowed non-MathML elements to be inserted arbitrarily inside MathML and these elements were incorrectly interpreted as MathML elements, thus causing potential security issues.

If the parser conforms with the HTML5 spec and correctly interprets the foreign elements at the MathML integration points (token elements and <annotation-xml>) then it won't be a problem any more.

Note that this situation happens in SVG's <foreignObject> too and I already restored the possibility to insert foreign content in <annotation-xml> (bug 100626).

I plan to work on this bug later since I'd like the refactoring and code clean up of token elements (bug 124838) to be finished first (if one reviewer could take a look at the patch on that bug, that would be helpful btw).

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.