10 ms·
It wouldn't help if new features extend the capabilities of existing stuff (which is done all the time). For example the CSS Shader example from before adds new
by zawerf 7y ago
It wouldn't help if new features extend the capabilities of existing stuff (which is done all the time). For example the CSS Shader example from before adds new syntax to the existing 'filter' css style, which you might've already whitelisted because it is safe today.
- ShaneCurran 7y agoI guess a nested, parameter-granularity whitelist would work in that case :)
- jorangreef 7y agoYou can do that with DOMPurify using hooks.