LGTM1. I think it's important that we address the TAG's concerns about gesture requirements and other mechanisms which might reduce the surprise associated with some uses of the clipboard API, but I agree with Darwin that shipping SVG support doesn't need to block on that conversation. That said, I'd encourage y'all to engage more closely with those questions. Marijn, you and +Victor Costan <[email protected]> are on an internal thread on that topic that we should follow up on.
Regarding style, this intent is the most conservative approach to sanitization, which has been approved by the security team. Ideally, we could find a way to allow style safely via the sanitization API work that's underway separately, as Anne suggested on Mozilla's standards position thread <https://github.com/mozilla/standards-positions/issues/549#issuecomment-884119060>. I also note that Apple's response on https://lists.webkit.org/pipermail/webkit-dev/2021-August/031940.html seems generally positive. -mike On Fri, Aug 13, 2021 at 11:54 PM Sean Voisen <[email protected]> wrote: > On Thursday, August 12th, 2021 at 12:22 PM, Alex Russell < > [email protected]> wrote: > > There's a recurring debate here about the stripping of inline style > information; Sean, how much worse is it for styles to be stripped in your > use-cases? If we wait for styles to be re-added (if they can be at all) to > ship this, how much worse is that? > > > Just so I'm clear, is the debate about stripping style attributes or style > elements or both? > We would want at least one of those. Illustrator allows for exporting SVG > with either, though by default (including when copying to clipboard) it > uses style elements like so: > > <style>.cls-1{fill:url(#radial-gradient);}.</style> > > If both were to be sanitized away then the feature would be of more > limited value for our use cases. > > Sean > > On Wednesday, August 11, 2021 at 9:23:33 PM UTC-7 Marijn Kruisselbrink > wrote: > >> API Owners: any further thoughts on this intent? Are there any >> open/pending questions for us? >> >> On Thu, Jul 15, 2021 at 3:23 PM Sean Voisen <[email protected]> wrote: >> >>> On Wednesday, July 7, 2021 at 1:30:51 AM UTC-7 [email protected] >>> wrote: >>> >>>> >>>>> Web developers: Positive >>>>> >>>>> >>>>> Any links? >>>>> >>>> >>> We have interest in using SVG support on the clipboard for web >>> applications at Adobe. While this can be achieved to some extent by placing >>> SVG content in text/plain, proper SVG support would definitely be >>> preferable. >>> >>> Cheers, >>> Sean >>> >> > -- > You received this message because you are subscribed to the Google Groups > "blink-dev" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/chromium.org/d/msgid/blink-dev/ROV74N4YKJX4uMRed9RUNCnyIQZRvzrLTepnhYugKwDseaZMB4Yq8Hhhlno99XIQqDTKpaAYmUdIR3D5oHat9ySM2I9HdmAVsAvfQRdNKBs%3D%40voisen.org > <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/ROV74N4YKJX4uMRed9RUNCnyIQZRvzrLTepnhYugKwDseaZMB4Yq8Hhhlno99XIQqDTKpaAYmUdIR3D5oHat9ySM2I9HdmAVsAvfQRdNKBs%3D%40voisen.org?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAKXHy%3DetF5YyNUVt8%3D%2BpHOXnAMRXLd9TPG2Cxyv-TXLqQdXh4g%40mail.gmail.com.
