Re: [w3ctag/design-reviews] Trusted Types (#198)

Thanks! For the record, `require-trusted-types-for 'script'` controls all enforcement for DOM XSS prevention (the only sink group we're tagetting right now), not just `javacript:` navigation. Point taken though, I'll try to clarify that in the explainer and review the spec to make that clear.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/198#issuecomment-595209995