Skip to content

Commit 3ee9131

Browse files
committed
Removed resolved issues from the spec text.
1 parent 204a9c5 commit 3ee9131

File tree

2 files changed

+3
-16
lines changed

2 files changed

+3
-16
lines changed

dist/spec/index.html

Lines changed: 3 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1214,7 +1214,7 @@
12141214
</style>
12151215
<meta content="Bikeshed version 0dd2bba6dfda6c3168490a3a3044dd1d0b1ef8e0" name="generator">
12161216
<link href="https://w3c.github.io/webappsec-trusted-types/dist/spec/" rel="canonical">
1217-
<meta content="54cdd77d2a0f07adc944de3ed907680a6709fe0c" name="document-revision">
1217+
<meta content="204a9c5a428338515a7653c097c3414873928b27" name="document-revision">
12181218
<style>/* style-md-lists */
12191219

12201220
/* This is a weird hack for me not yet following the commonmark spec
@@ -1594,8 +1594,7 @@ <h2 class="no-num no-toc no-ref" id="contents">Table of Contents</h2>
15941594
<ol class="toc">
15951595
<li><a href="#cross-document-vectors"><span class="secno">5.1</span> <span class="content">Cross-document vectors</span></a>
15961596
<li><a href="#deprecated-features"><span class="secno">5.2</span> <span class="content">Deprecated features</span></a>
1597-
<li><a href="#bypass-vectors"><span class="secno">5.3</span> <span class="content">Bypass vectors</span></a>
1598-
<li><a href="#best-practices-for-policy-design"><span class="secno">5.4</span> <span class="content">Best practices for policy design</span></a>
1597+
<li><a href="#best-practices-for-policy-design"><span class="secno">5.3</span> <span class="content">Best practices for policy design</span></a>
15991598
</ol>
16001599
<li>
16011600
<a href="#implementation-considerations"><span class="secno">6</span> <span class="content">Implementation Considerations</span></a>
@@ -3282,10 +3281,7 @@ <h3 class="heading settled" data-level="5.2" id="deprecated-features"><span clas
32823281
<li data-md>
32833282
<p><a href="https://w3c.github.io/webcomponents/spec/imports/">HTML imports</a></p>
32843283
</ul>
3285-
<h3 class="heading settled" data-level="5.3" id="bypass-vectors"><span class="secno">5.3. </span><span class="content">Bypass vectors</span><a class="self-link" href="#bypass-vectors"></a></h3>
3286-
<p class="issue" id="issue-1c3973fc"><a class="self-link" href="#issue-1c3973fc"></a> Mention anchor element properties bypass. <a href="https://github.com/w3c/webappsec-trusted-types/issues/64">&lt;https://github.com/w3c/webappsec-trusted-types/issues/64></a></p>
3287-
<p class="issue" id="issue-fb0cfdf0"><a class="self-link" href="#issue-fb0cfdf0"></a> Mention text/attribute node copy bypass vectors. <a href="https://github.com/w3c/webappsec-trusted-types/issues/47">&lt;https://github.com/w3c/webappsec-trusted-types/issues/47></a></p>
3288-
<h3 class="heading settled" data-level="5.4" id="best-practices-for-policy-design"><span class="secno">5.4. </span><span class="content">Best practices for policy design</span><a class="self-link" href="#best-practices-for-policy-design"></a></h3>
3284+
<h3 class="heading settled" data-level="5.3" id="best-practices-for-policy-design"><span class="secno">5.3. </span><span class="content">Best practices for policy design</span><a class="self-link" href="#best-practices-for-policy-design"></a></h3>
32893285
<p>Trusted Types limit the scope of the code that can introduce DOM XSS
32903286
vulnerabilities to the implementation of <a href="#policies">policies</a>. In this design,
32913287
insecure policies can still enable XSS. Special emphasis needs to be taken by
@@ -4276,8 +4272,6 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
42764272
Specifically when, there is a <a data-link-type="dfn" href="#default-policy">default policy</a>, <var>isExempt</var> is false,
42774273
and <var>source</var> there is a CSP policy for either the <var>callerRealm</var> or <var>callerRealm</var> that disallows "<code>'unsafe-eval'"</code>.
42784274
Is this a feature or a bug?<a href="#issue-649f8da4"></a></div>
4279-
<div class="issue"> Mention anchor element properties bypass. <a href="https://github.com/w3c/webappsec-trusted-types/issues/64">&lt;https://github.com/w3c/webappsec-trusted-types/issues/64></a><a href="#issue-1c3973fc"></a></div>
4280-
<div class="issue"> Mention text/attribute node copy bypass vectors. <a href="https://github.com/w3c/webappsec-trusted-types/issues/47">&lt;https://github.com/w3c/webappsec-trusted-types/issues/47></a><a href="#issue-fb0cfdf0"></a></div>
42814275
<div class="issue"> Refer to the external document on secure policy design.<a href="#issue-2eb927d2"></a></div>
42824276
</div>
42834277
<aside class="dfn-panel" data-for="injection-sink">

spec/index.bs

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1812,13 +1812,6 @@ restrictions:
18121812

18131813
* <a href="https://w3c.github.io/webcomponents/spec/imports/">HTML imports</a>
18141814

1815-
## Bypass vectors ## {#bypass-vectors}
1816-
1817-
Issue(w3c/webappsec-trusted-types#64): Mention anchor element properties bypass.
1818-
1819-
Issue(w3c/webappsec-trusted-types#47): Mention text/attribute node copy bypass vectors.
1820-
1821-
18221815
## Best practices for policy design ## {#best-practices-for-policy-design}
18231816

18241817
Trusted Types limit the scope of the code that can introduce DOM XSS

0 commit comments

Comments
 (0)