Updates:
        Labels: -Type-Defect -Component-Other Type-Enhancement 
Component-Sanitizer

Comment #6 on issue 1900 by [email protected]: html5 pattern attribute not working when served from HtmlService
http://code.google.com/p/google-caja/issues/detail?id=1900

https://code.google.com/p/google-caja/source/browse/trunk/src/com/google/caja/lang/html/html5-attributes-whitelist.json

INPUT::PATTERN was not enabled in the original HTML5-whitelisting pass because I didn't take the time to think about whether there was any way in which it would be unsafe (i.e. the pattern language containing some form of authority). There probably isn't, but it should be thought about.

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--

--- You received this message because you are subscribed to the Google Groups "Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to