Status: New
Owner: [email protected]
Labels: Type-Defect Priority-Medium
New issue 1579 by kpreid.switchb.org: URI policy default is a lost signal
bug
http://code.google.com/p/google-caja/issues/detail?id=1579
What steps will reproduce the problem?
1. Use the Caja API as suggested by
https://developers.google.com/caja/docs/gettingstarted/, passing undefined
as uriPolicy, in ES5 mode.
2. Load HTML which includes a <script src="...">.
What is the expected output? What do you see instead?
I expect that the script load should fail but the rest of the page should
appear. Instead, the HTML after the <script> element is ignored.
Please use labels and text to provide additional information.
While single-stepping I found that the NO_NETWORK URI policy does not
invoke its callback parameter, not even with an indication of failure; this
means that the HTML parser continuation is never invoked.
