- From: Anne van Kesteren <notifications@github.com>
- Date: Tue, 29 Jan 2019 01:09:58 -0800
- To: w3c/DOM-Parsing <DOM-Parsing@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Tuesday, 29 January 2019 09:10:19 UTC
I'm not sure. I think this API might have come from Firefox and they might have had a safelist of MIME types initially they would compare against literally and throw otherwise? Note that there's other places where we don't allow the full complexity of MIME types, though case-insensitive matching is often done. E.g., `<script type=text/javascript;>` will not execute. For new places we should probably not follow those patterns, but changing these old places is a lot of risk for little-to-no reward. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/w3c/DOM-Parsing/issues/40#issuecomment-458462693
Received on Tuesday, 29 January 2019 09:10:19 UTC