This is awesome! Thank you for working on this Daniel!

Jun

On Thursday, September 29, 2022 at 7:34:16 AM UTC-7 Daniel Vogelheim wrote:

> Contact emailsvoge...@chromium.org
>
> Specificationhttps://w3c.github.io/trusted-types/dist/spec/#trusted-html
>
> Summary
>
> Add a function to each "Trusted Type" to create an instance from a 
> JavaScript template literal (but not from a dynamically computed string). 
> This makes it easy to mark literals in the JavaScript source text as 
> "trusted". Example:
>
> const html = TrustedHTML.fromLiteral`<p>Literal Text</p>`;
>
> Blink componentBlink>SecurityFeature>TrustedTypes 
> <https://bugs.chromium.org/p/chromium/issues/list?q=component:Blink%3ESecurityFeature%3ETrustedTypes>
>
> TAG reviewn/a
>
> TAG review statusNot applicable
>
> Risks
>
> Interoperability and Compatibility
>
>
> *Gecko*: No signal. (Gecko has not implemented Trusted Types.)
>
> *WebKit*: No signal. (WebKit has not implemented Trusted Types.)
>
> *Web developers*: Positive (
> https://github.com/w3c/trusted-types/issues/347)
>
> *Other signals*:
>
> WebView application risks
>
> Does this intent deprecate or change behavior of existing APIs, such that 
> it has potentially high risk for Android WebView-based applications? No.
>
>
>
> Debuggability
>
> It's a new method. Its use can be readily debugged in DevTools.
>
>
> Will this feature be supported on all six Blink platforms (Windows, Mac, 
> Linux, Chrome OS, Android, and Android WebView)?Yes
>
> Is this feature fully tested by web-platform-tests 
> <https://chromium.googlesource.com/chromium/src/+/main/docs/testing/web_platform_tests.md>
> ?Yes
>
> Flag nameTrustedTypesFromLiteral
>
> Requires code in //chrome?False
>
> Tracking bughttps://bugs.chromium.org/p/chromium/issues/detail?id=1271149
>
> Estimated milestones
>
> 108
>
>
> Anticipated spec changes
>
> Open questions about a feature may be a source of future web compat or 
> interop issues. Please list open issues (e.g. links to known github issues 
> in the project for the feature specification) whose resolution may 
> introduce web compat/interop risk (e.g., changing to naming or structure of 
> the API in a non-backward-compatible way).
>
>
> Link to entry on the Chrome Platform Status
> https://chromestatus.com/feature/6551852775112704
>

-- 
You received this message because you are subscribed to the Google Groups 
"blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to blink-dev+unsubscr...@chromium.org.
To view this discussion on the web visit 
https://groups.google.com/a/chromium.org/d/msgid/blink-dev/18969243-5331-4e32-9eda-8e02051906ffn%40chromium.org.

Reply via email to