Skip to content

Issues: w3c/trusted-types

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

50 Open 195 Closed
50 Open 195 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

"pre-navigation check" uses "request’s clients's global object" which is null
#548 opened Sep 18, 2024 by mbrodesser-Igalia v1
1
"stringifying" in "Process value with a default policy" needs to be defined spec
#541 opened Aug 15, 2024 by mbrodesser-Igalia
3
How can policyValue be 'undefined'?
#540 opened Aug 2, 2024 by smaug----
2
Should the APIs for creating a TrustedScript etc return a frozen object? spec
#535 opened Jul 11, 2024 by lukewarlow v1
1
Should "Get Trusted Type compliant string" check isHTML/isScript/isScriptURL?
#534 opened Jul 11, 2024 by mbrodesser-Igalia v1
2
Add WPT that createPolicy which violates the trusted-types CSP directive fires a violation event for Windows (not Workers)
#530 opened Jun 20, 2024 by mbrodesser-Igalia v1
1
@mbrodesser-Igalia
1
Add WPTs for report-uri with Workers
#526 opened Jun 17, 2024 by mbrodesser-Igalia v1
Script element mid-parse protection mechanism spec
#525 opened Jun 12, 2024 by lukewarlow v1
10
getPropertyType and SVGScriptElement href baseVal property spec
#521 opened Jun 12, 2024 by lukewarlow
3
Finalise spec mechanism for event handlers spec
#520 opened Jun 12, 2024 by lukewarlow v1
9
Seeking Trusted Types feedback on Array.isTemplateObject
#519 opened May 28, 2024 by littledan
5
Should all 3 script IDL setters change the associated script text value identically spec
#517 opened May 20, 2024 by lukewarlow
11
Add WPTs for CSP sandbox allow-scripts combined with Trusted Types
#513 opened May 9, 2024 by mbrodesser-Igalia v1
2
Should SVGScriptElement have an IDL way to set a trusted script value? spec
#512 opened May 2, 2024 by lukewarlow v2
2
Script element protection model
#507 opened Apr 22, 2024 by lukewarlow
2
createPolicy's permitted policy names are inconsistent with CSP's permitted policy names spec
#504 opened Apr 17, 2024 by mbrodesser-Igalia v1
6
Check variable naming inside of getAttributeType and getPropertyType methods spec
#496 opened Mar 28, 2024 by lukewarlow
2
Improve test coverage of sink values
#494 opened Mar 28, 2024 by lukewarlow v1
1
SVGScriptElement needs TT protection too
#483 opened Mar 18, 2024 by lukewarlow v1
1
1
[Meta] Upstream changes
#476 opened Mar 13, 2024 by lukewarlow
2
Adopt Infra syntax throughout
#472 opened Mar 7, 2024 by annevk
Developer-centric research results about Trusted Types
#471 opened Mar 6, 2024 by rothsn
2
Stringification of TrustedHTML with null-data needs to be specified
#469 opened Mar 6, 2024 by mbrodesser-Igalia v1
1
21
Why is "callback **this** value set to null" required in step 5 of "Get Trusted Type policy value"?
#468 opened Mar 6, 2024 by mbrodesser-Igalia
1
Creating a policy with policyName="" is possible, but can't be referred to by the "trusted-types" CSP directive
#466 opened Mar 5, 2024 by mbrodesser-Igalia v2
1
8
ProTip! Follow long discussions with comments:>50.