254
edits
Platform/HTML5 sanitizer: Difference between revisions
Jump to navigation
Jump to search
→Gecko Requirements
(→Gecko Requirements: +questions) |
|||
| Line 6: | Line 6: | ||
* Have three element white lists: HTML, SVG and MathML. | * Have three element white lists: HTML, SVG and MathML. | ||
* Have three attribute white lists: HTML, SVG and MathML. The attributes don't depend on the element they are on beyond the element namespace. | * Have three attribute white lists: HTML, SVG and MathML. The attributes don't depend on the element they are on beyond the element namespace. | ||
** XXX: Figure out what the requirements are for attributes starting with data- or _. | |||
* Have three lists of attributes that take URLs. Drop the attributes when they have prohibited URLs (after trimming whitespace from the value). | * Have three lists of attributes that take URLs. Drop the attributes when they have prohibited URLs (after trimming whitespace from the value). | ||
** Resolve relative URLs into absolute ones using a per fragment base URL. (Is this correct for Gecko reqs? Current code uses the node's base URI. Is that right?) | ** Resolve relative URLs into absolute ones using a per fragment base URL. (Is this correct for Gecko reqs? Current code uses the node's base URI. Is that right?) | ||