+
Tests
+-
+
- block-Document-execCommand.html (live test) (source) +
- block-Node-multiple-arguments.html (live test) (source) +
- block-string-assignment-to-attribute-via-attribute-node.html (live test) (source) +
- block-string-assignment-to-Document-write.html (live test) (source) +
- block-string-assignment-to-DOMParser-parseFromString.html (live test) (source) +
- block-string-assignment-to-DOMWindowTimers-setTimeout-setInterval.html (live test) (source) +
- block-string-assignment-to-Element-insertAdjacentHTML.html (live test) (source) +
- block-string-assignment-to-Element-outerHTML.html (live test) (source) +
- block-string-assignment-to-Element-setAttribute.html (live test) (source) +
- block-string-assignment-to-Element-setAttributeNS.html (live test) (source) +
- block-string-assignment-to-HTMLElement-generic.html (live test) (source) +
- block-string-assignment-to-Range-createContextualFragment.html (live test) (source) +
- block-text-node-insertion-into-script-element.html (live test) (source) +
- csp-block-eval.html (live test) (source) +
- default-policy-callback-arguments.html (live test) (source) +
- default-policy-report-only.html (live test) (source) +
- default-policy.html (live test) (source) +
- Document-execCommand.html (live test) (source) +
- Document-write.html (live test) (source) +
- DOMParser-parseFromString-regression.html (live test) (source) +
- DOMParser-parseFromString.html (live test) (source) +
- DOMWindowTimers-setTimeout-setInterval.html (live test) (source) +
- Element-insertAdjacentHTML.html (live test) (source) +
- Element-insertAdjacentText.html (live test) (source) +
- Element-outerHTML.html (live test) (source) +
- Element-setAttribute.html (live test) (source) +
- Element-setAttributeNS.html (live test) (source) +
- empty-default-policy-report-only.html (live test) (source) +
- empty-default-policy.html (live test) (source) +
- eval-csp-no-tt.html (live test) (source) +
- eval-csp-tt-default-policy.html (live test) (source) +
- eval-csp-tt-no-default-policy.html (live test) (source) +
- eval-function-constructor.html (live test) (source) +
- eval-no-csp-no-tt-default-policy.html (live test) (source) +
- eval-no-csp-no-tt.html (live test) (source) +
- eval-with-permissive-csp.html (live test) (source) +
- GlobalEventHandlers-onclick.html (live test) (source) +
- HTMLElement-generic.html (live test) (source) +
- HTMLScriptElement-in-xhtml-document.tentative.https.xhtml (live test) (source) +
- HTMLScriptElement-internal-slot.html (live test) (source) +
- no-require-trusted-types-for-report-only.html (live test) (source) +
- no-require-trusted-types-for.html (live test) (source) +
- Node-multiple-arguments.html (live test) (source) +
- Range-createContextualFragment.html (live test) (source) +
- require-trusted-types-for-report-only.html (live test) (source) +
- require-trusted-types-for.html (live test) (source) +
- trusted-types-createHTMLDocument.html (live test) (source) +
- trusted-types-duplicate-names-list-report-only.html (live test) (source) +
- trusted-types-duplicate-names-list.html (live test) (source) +
- trusted-types-duplicate-names-without-enforcement.html (live test) (source) +
- trusted-types-duplicate-names.html (live test) (source) +
- trusted-types-eval-reporting-no-unsafe-eval.html (live test) (source) +
- trusted-types-eval-reporting-report-only.html (live test) (source) +
- trusted-types-eval-reporting.html (live test) (source) +
- trusted-types-event-handlers.html (live test) (source) +
- trusted-types-from-literal.html (live test) (source) +
- trusted-types-navigation.html (live test) (source) +
- trusted-types-report-only.html (live test) (source) +
- trusted-types-reporting-check-report.html (live test) (source) +
- trusted-types-reporting.html (live test) (source) +
- trusted-types-source-file-path.html (live test) (source) +
- trusted-types-svg-script.html (live test) (source) +
- trusted-types-tojson.html (live test) (source) +
- TrustedType-AttributeNodes.html (live test) (source) +
- TrustedTypePolicy-createXXX.html (live test) (source) +
- TrustedTypePolicy-CSP-no-name.html (live test) (source) +
- TrustedTypePolicy-CSP-wildcard.html (live test) (source) +
- TrustedTypePolicyFactory-blocking.html (live test) (source) +
- TrustedTypePolicyFactory-constants.html (live test) (source) +
- TrustedTypePolicyFactory-createPolicy-createXYZTests.html (live test) (source) +
- TrustedTypePolicyFactory-createPolicy-cspTests-noNamesGiven.html (live test) (source) +
- TrustedTypePolicyFactory-createPolicy-cspTests-none-skip.html (live test) (source) +
- TrustedTypePolicyFactory-createPolicy-cspTests-none.html (live test) (source) +
- TrustedTypePolicyFactory-createPolicy-cspTests-wildcard.html (live test) (source) +
- TrustedTypePolicyFactory-createPolicy-cspTests.html (live test) (source) +
- TrustedTypePolicyFactory-createPolicy-nameTests.html (live test) (source) +
- TrustedTypePolicyFactory-createPolicy-unenforced.html (live test) (source) +
- TrustedTypePolicyFactory-defaultPolicy.html (live test) (source) +
- TrustedTypePolicyFactory-getAttributeType-namespace.html (live test) (source) +
- TrustedTypePolicyFactory-getPropertyType.html (live test) (source) +
- TrustedTypePolicyFactory-isXXX.html (live test) (source) +
- TrustedTypePolicyFactory-metadata.html (live test) (source) +
- tt-block-eval.html (live test) (source) +
- Window-TrustedTypes.html (live test) (source) +
- worker-constructor.https.html (live test) (source) +
- WorkerGlobalScope-eval.html (live test) (source) +
- WorkerGlobalScope-importScripts.html (live test) (source) +
1. Introduction
This section is not normative.
Certain classes of vulnerabilities occur when a web application @@ -2759,6 +2990,14 @@
,
like this:
Note, this is an informative note.
+
+ Tests
+ Tests relating to the content of this specification
+ may be documented in “Tests” blocks like this one.
+ Any such block is non-normative.
+
+
+
Conformant Algorithms
Requirements phrased in the imperative as part of algorithms
@@ -4320,4 +4559,122 @@
+
\ No newline at end of file
Tests
+Tests relating to the content of this specification + may be documented in “Tests” blocks like this one. + Any such block is non-normative.
++
Conformant Algorithms
Requirements phrased in the imperative as part of algorithms @@ -4320,4 +4559,122 @@