[Webkit-unassigned] [Bug 30432] BASE tag is allowed more than once and outside the <head> section

Fri Aug 19 17:15:39 PDT 2022

https://bugs.webkit.org/show_bug.cgi?id=30432

Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |CONFIGURATION CHANGED

--- Comment #6 from Alexey Proskuryakov <ap at webkit.org> ---
Not sure if WPT covers everything that this bug talks about, but in my testing, all browsers agree now.

- When there are multiple BASE elements, only the first one is respected.
- BASE elements in BODY _are_ respected.

> I want to add that this has security considerations

I think that you are correct, but at this point, it's up to websites to prevent base element injection.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220820/32768e7e/attachment.htm>