mmh, it seems correct link is https://w3c.github.io/trusted-types/dist/spec/
Le 09/12/2025 à 18:20, 'Erich Gubler' via [email protected] a écrit :
https://w3c.github.io/trusted-types doesn't work for me. Is it
expected that the content for it is up yet?
On Tue, Dec 9, 2025 at 5:42 AM Frédéric Wang <[email protected]> wrote:
As of Firefox 148, I intend to turn Trusted Types on by default on
all
platforms. It has been developed behind the
dom.security.trusted_types.enabled preference. Status in other
browsers
is shipped since Chromium 83 (but see some notes below) and Safari 26.
Bug to turn on by default:
https://bugzilla.mozilla.org/show_bug.cgi?id=1994690
Standards: https://w3c.github.io/trusted-types/,
https://w3c.github.io/webappsec-csp/ https://html.spec.whatwg.org/,
https://dom.spec.whatwg.org/ and https://tc39.es/ecma262/
This feature was previously discussed in this "Intent to prototype"
thread:
https://groups.google.com/a/mozilla.org/g/dev-platform/c/zQaRDA68e5A/m/XX_CRC4mAQAJ
Since then, there has been some adjustments in the spec (bug 1997521)
and WPT tests, but we still have the best score of all browsers
(https://wpt.fyi/results/trusted-types?label=experimental&label=master&aligned
<https://wpt.fyi/results/trusted-types?label=experimental&label=master&aligned>).
The TrustedTypes spec had diverged a lot from Chromium's initial
implementation. Chromium's WPT score was much lower than
WebKit/Firefox,
causing interop concerns. However per
https://groups.google.com/a/chromium.org/g/blink-dev/c/OjQXhCZiXe0/m/VW2bMfeoCgAJ
; they plan to ship it in Chromium 145 (Feb 10). So if their plan
goes
as expected, that would be before Firefox 148 (Feb 24).
Since we enabled TrustedTypes in Firefox Nightly, there was only one
serious regression reported (involving an already known TODO) and
it has
finally been fixed now. For more details, see bug 1997818 and bug
2001929.
Initially, we intended to go through Origin Trials for Trusted Types
(bug 1991658) but due to some technical limitations with our Origin
Trials implementation (bug 1757935) we decided to skip that.
Instead, we
relied on the fact that no TT serious issues were reported to us
(Igalia) regarding:
1) TrustedTypes enabled in Firefox early beta (
https://bugzilla.mozilla.org/show_bug.cgi?id=1992941 )
2) TrustedTypes enabled in Safari 26, which had similar alignment
with
the latest TrustedTypes spec.
3) Google experimenting their products with Firefox
+ TrustedTypes enabled.
That gives us more confidence to go ahead with shipping
TrustedTypes in
Firefox.
--
You received this message because you are subscribed to the Google
Groups "[email protected]" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to [email protected]
<mailto:dev-platform%[email protected]>.
To view this discussion visit
https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/a3413941-75fd-402c-a6e1-c74e728ff914%40igalia.com.
--
You received this message because you are subscribed to the Google
Groups "[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to [email protected].
To view this discussion visit
https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/CAGZxKZ2Q8mZQT%3D9_Q4ZV7Szf%2Bg%3DE_urChVZUsLFq56Y8HsMNxA%40mail.gmail.com
<https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/CAGZxKZ2Q8mZQT%3D9_Q4ZV7Szf%2Bg%3DE_urChVZUsLFq56Y8HsMNxA%40mail.gmail.com?utm_medium=email&utm_source=footer>.
--
You received this message because you are subscribed to the Google Groups
"[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion visit
https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/20de0e24-babc-4229-bf21-42858b372e11%40igalia.com.
