[Webkit-unassigned] [Bug 287107] New: Trusted Types runs extra code than neccessary when not used in CSP

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Feb 5 11:14:22 PST 2025


https://bugs.webkit.org/show_bug.cgi?id=287107

            Bug ID: 287107
           Summary: Trusted Types runs extra code than neccessary when not
                    used in CSP
           Product: WebKit
           Version: Other
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: DOM
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: lwarlow at igalia.com
            Blocks: 266630

Currently for sinks we check through the CSP policies each time the sink is hit. We can save this work by setting a flag on the document object (which we already have code to do for eval optimisations), and using that instead.

We can also skip some work for various attribute methods, by using the same flag.


Referenced Bugs:

https://bugs.webkit.org/show_bug.cgi?id=266630
[Bug 266630] Implement Trusted Types
-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20250205/4723467e/attachment-0001.htm>


More information about the webkit-unassigned mailing list