diff --git a/spec/index.bs b/spec/index.bs index 9e1e08e..c87f2e4 100644 --- a/spec/index.bs +++ b/spec/index.bs @@ -331,7 +331,7 @@ DOM XSS injection sinks also include HTML parsing sinks: * Functions that parse & insert HTML strings into the document like {{InnerHTML/innerHTML|Element.innerHTML}}, - {{Element/outerHTML|Element.outerHTML}} setter, or {{Document/write|Document.write}}. + {{Element/outerHTML|Element.outerHTML}} setter, or Document.write. * Functions that create a new same-origin {{Document}} with caller-controlled markup like {{DOMParser/parseFromString()}}. @@ -1148,42 +1148,6 @@ partial interface mixin WindowOrWorkerGlobalScope { The {{WindowOrWorkerGlobalScope/trustedTypes}} getter steps are to return [=this=]'s [=relevant global object=]'s [[#integration-with-html|trusted type policy factory]]. -### Enforcement in the Document interface ### {#enforcement-in-document-interface} - -This document modifies the {{Document}} interface defined by [[HTML5|HTML]]: - -
-partial interface Document { - [CEReactions] undefined write(HTMLString... text); - [CEReactions] undefined writeln(HTMLString... text); - static Document parseHTMLUnsafe(HTMLString html); -}; -- -### Enforcement in DOMParser interface ### {#enforcement-in-domparser-interface} - -This document modifies the {{DOMParser}} interface defined by [[HTML5|HTML]]: - -
-partial interface DOMParser { - [NewObject] Document parseFromString(HTMLString str, SupportedType type); -}; -- -### Enforcement in the Element and ShadowRoot interfaces ### {#enforcement-in-element-shadowroot-interfaces} - -This document modifies the {{Element}} and {{ShadowRoot}} interfaces defined by [[HTML5|HTML]]: - -
-partial interface Element { - [CEReactions] undefined setHTMLUnsafe(HTMLString html); -}; - -partial interface ShadowRoot { - [CEReactions] undefined setHTMLUnsafe(HTMLString html); -}; -- ### Enforcement for scripts ### {#enforcement-in-scripts} #### Slots with trusted values #### {#slots-with-trusted-values} @@ -1246,10 +1210,6 @@ The first few steps of the [=prepare the script element=] algorithm are modified This document modifies following IDL attributes of various DOM elements:
-partial interface HTMLIFrameElement { - [CEReactions] attribute HTMLString srcdoc; -}; - partial interface HTMLEmbedElement { [CEReactions] attribute ScriptURLString src; }; @@ -1356,27 +1316,6 @@ When validate the string in context is invoked, with |platformObject|, |v 1. If an exception was thrown, rethrow exception and abort further steps. 1. Return |value|. -### Web Workers ### {#html-workers} - -This specification modifies the Worker constuctors and {{importScripts}} function to require {{ScriptURLString}}. - --[Exposed=(Window,Worker)] -partial interface Worker : EventTarget { - constructor(ScriptURLString scriptURL, optional WorkerOptions options = {}); -}; - -[Exposed=(Window,Worker)] -partial interface SharedWorker : EventTarget { - constructor(ScriptURLString scriptURL, optional (DOMString or WorkerOptions) options = {}); -}; - -[Exposed=Worker] -partial interface WorkerGlobalScope : EventTarget { - undefined importScripts(ScriptURLString... urls); -}; -- ## Integration with Service Workers ## {#sw-integration} This document modifies the IDL for registering service workers, requiring {{ScriptURLString}}: