Re: [w3c/webcomponents] HTML, CSS, and JSON modules shouldn't solely rely on MIME type to change parsing behavior (#839) from Anne van Kesteren on 2019-10-10 (public-webapps-github@w3.org from October 2019)

From: Anne van Kesteren <notifications@github.com>
Date: Thu, 10 Oct 2019 00:33:50 -0700
To: w3c/webcomponents <webcomponents@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <w3c/webcomponents/issues/839/540435302@github.com>

FWIW, I kinda like the "no execute" / "no side effects" statement.

@LarsDenBakker even if we make exceptions for same-origin (which I'd rather not), we need something that addresses cross-origin scenarios. Not all cross-origin is necessarily third-party either. CDNs for assets only are still a thing.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/webcomponents/issues/839#issuecomment-540435302

Received on Thursday, 10 October 2019 07:33:55 UTC