LGTM2 On Thu, Aug 19, 2021 at 11:46 AM Mike West <[email protected]> wrote:
> LGTM1. > > I think it's important that we address the TAG's concerns about gesture > requirements and other mechanisms which might reduce the surprise > associated with some uses of the clipboard API, but I agree with Darwin > that shipping SVG support doesn't need to block on that conversation. That > said, I'd encourage y'all to engage more closely with those questions. > Marijn, you and +Victor Costan <[email protected]> are on an internal > thread on that topic that we should follow up on. > > Regarding style, this intent is the most conservative approach to > sanitization, which has been approved by the security team. Ideally, we > could find a way to allow style safely via the sanitization API work that's > underway separately, as Anne suggested on Mozilla's standards position > thread > <https://github.com/mozilla/standards-positions/issues/549#issuecomment-884119060>. > I also note that Apple's response on > https://lists.webkit.org/pipermail/webkit-dev/2021-August/031940.html > seems generally positive. > > -mike > > > On Fri, Aug 13, 2021 at 11:54 PM Sean Voisen <[email protected]> wrote: > >> On Thursday, August 12th, 2021 at 12:22 PM, Alex Russell < >> [email protected]> wrote: >> >> There's a recurring debate here about the stripping of inline style >> information; Sean, how much worse is it for styles to be stripped in your >> use-cases? If we wait for styles to be re-added (if they can be at all) to >> ship this, how much worse is that? >> >> >> Just so I'm clear, is the debate about stripping style attributes or >> style elements or both? >> We would want at least one of those. Illustrator allows for exporting SVG >> with either, though by default (including when copying to clipboard) it >> uses style elements like so: >> >> <style>.cls-1{fill:url(#radial-gradient);}.</style> >> >> If both were to be sanitized away then the feature would be of more >> limited value for our use cases. >> >> Sean >> >> On Wednesday, August 11, 2021 at 9:23:33 PM UTC-7 Marijn Kruisselbrink >> wrote: >> >>> API Owners: any further thoughts on this intent? Are there any >>> open/pending questions for us? >>> >>> On Thu, Jul 15, 2021 at 3:23 PM Sean Voisen <[email protected]> wrote: >>> >>>> On Wednesday, July 7, 2021 at 1:30:51 AM UTC-7 [email protected] >>>> wrote: >>>> >>>>> >>>>>> Web developers: Positive >>>>>> >>>>>> >>>>>> Any links? >>>>>> >>>>> >>>> We have interest in using SVG support on the clipboard for web >>>> applications at Adobe. While this can be achieved to some extent by placing >>>> SVG content in text/plain, proper SVG support would definitely be >>>> preferable. >>>> >>>> Cheers, >>>> Sean >>>> >>> >> -- >> You received this message because you are subscribed to the Google Groups >> "blink-dev" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/chromium.org/d/msgid/blink-dev/ROV74N4YKJX4uMRed9RUNCnyIQZRvzrLTepnhYugKwDseaZMB4Yq8Hhhlno99XIQqDTKpaAYmUdIR3D5oHat9ySM2I9HdmAVsAvfQRdNKBs%3D%40voisen.org >> <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/ROV74N4YKJX4uMRed9RUNCnyIQZRvzrLTepnhYugKwDseaZMB4Yq8Hhhlno99XIQqDTKpaAYmUdIR3D5oHat9ySM2I9HdmAVsAvfQRdNKBs%3D%40voisen.org?utm_medium=email&utm_source=footer> >> . >> > -- > You received this message because you are subscribed to the Google Groups > "blink-dev" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAKXHy%3DetF5YyNUVt8%3D%2BpHOXnAMRXLd9TPG2Cxyv-TXLqQdXh4g%40mail.gmail.com > <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAKXHy%3DetF5YyNUVt8%3D%2BpHOXnAMRXLd9TPG2Cxyv-TXLqQdXh4g%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAOMQ%2Bw_YNLbXWPtQjiyNQxCPB9Papjm7kU-9LvgXc8LiBh39Nw%40mail.gmail.com.
