[Webkit-unassigned] [Bug 274519] New: Script elements in XHTML documents dont work with trusted types are enforced

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed May 22 05:47:04 PDT 2024


https://bugs.webkit.org/show_bug.cgi?id=274519

            Bug ID: 274519
           Summary: Script elements in XHTML documents dont work with
                    trusted types are enforced
           Product: WebKit
           Version: Safari 17
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: SVG
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: lwarlow at igalia.com
                CC: sabouhallawa at apple.com, zimmermann at kde.org

Currently the XMLDocumentParser::updateLeafTextNode() method calls appendData() which means the script elements all think they've been manipulated by JS and so aren't trusted.

This method should ideally use parserAppendData() which will fix script elements. However, this means that mutation events aren't fired which breaks SVGTRefElement's because they rely on mutation events to work.

SVGTRef is deprecated and unsupported by any other engine so is it possible we can remove support for them? (MDN already says they're not supported but that's erroneous based on the failing tests)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240522/5b8354fd/attachment-0001.htm>


More information about the webkit-unassigned mailing list