254
edits
| Line 12: | Line 12: | ||
**** Ignoring document.write from network task sources when the insertion point is undefined would mitigate 4 out of the 6 current HTML5 parser evang bugs. [http://www.w3.org/Bugs/Public/show_bug.cgi?id=9767 Spec bug filed]. | **** Ignoring document.write from network task sources when the insertion point is undefined would mitigate 4 out of the 6 current HTML5 parser evang bugs. [http://www.w3.org/Bugs/Public/show_bug.cgi?id=9767 Spec bug filed]. | ||
*Reviews on patches | *Reviews on patches | ||
** [https://bugzilla.mozilla.org/show_bug.cgi?id= | ** [https://bugzilla.mozilla.org/show_bug.cgi?id=563514 563514] Attribute leak in the fragment case (sicking) | ||
*Patches waiting landing (due to CLOSED TREE) | *Patches waiting landing (due to CLOSED TREE) | ||
** [https://bugzilla.mozilla.org/show_bug.cgi?id=552938 552938] Implement the SVG load event in text/html | ** [https://bugzilla.mozilla.org/show_bug.cgi?id=552938 552938] Implement the SVG load event in text/html | ||
** [https://bugzilla.mozilla.org/show_bug.cgi?id=566280 566280] Plain text prefixed by U+0000 displays only U+FFFD | |||
** [https://bugzilla.mozilla.org/show_bug.cgi?id=568800 568800] Implement spec changes to named character reference parsing in attribute values | |||
*Security review. | *Security review. | ||
** Talked to dveditz about how to do the security review for the HTML5 parser, and it's not clear what the best format for the review would be. But we did decide that it's not something we need to do before turning the parser on by default, but we need to do it before we ship it. --jst | ** Talked to dveditz about how to do the security review for the HTML5 parser, and it's not clear what the best format for the review would be. But we did decide that it's not something we need to do before turning the parser on by default, but we need to do it before we ship it. --jst | ||
edits