Re: Intent to unship: typeMustMatch attribute on elements

[Mike Taylor]

On 5/3/19 4:06 AM, Frederik Braun wrote:

In bug 1548773, annevk suggested to unship the `typeMustMatch`attribute
from  elements[1].

No other browser supports this and we have just learned that this
attribute can be used to leak information about cross-origin resources[2].

While it seems worth removing immediately to me, I'm interested in
additional feedback.


I ran a search on BigQuery over HTTP Archive data (just for desktop) and 
here are the results:




I only looked at 10 random items, and nothing seemed alarming -- just 
enumeration of attributes, or mapping strings to props, or regular 
expressions looking for valid attributes.


(Might be worth someone putting in more than 5 minutes of poking around 
though).


--
Mike Taylor
Web Compat, Mozilla
___
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Re: Intent to unship: typeMustMatch attribute on elements

[Anne van Kesteren]

On Fri, May 3, 2019 at 11:06 AM Frederik Braun  wrote:
> In bug 1548773, annevk suggested to unship the `typeMustMatch`attribute
> from  elements[1].

I've now also changed the HTML standard in
https://github.com/whatwg/html/pull/4590 and updated WPT in
https://github.com/web-platform-tests/wpt/pull/16656.


> [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1548773
___
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Intent to unship: typeMustMatch attribute on elements

[Frederik Braun]

Hi,

In bug 1548773, annevk suggested to unship the `typeMustMatch`attribute
from  elements[1].

No other browser supports this and we have just learned that this
attribute can be used to leak information about cross-origin resources[2].

While it seems worth removing immediately to me, I'm interested in
additional feedback.

Thanks,
Freddy

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1548773
[2]
https://github.com/xsleaks/xsleaks/wiki/Browser-Side-Channels#object-typemustmatch
___
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform