You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
sink being the result of concatenating the list « element’s local name, localName » with "." as a separator.
NOTE: For example, document.createElement('div').onclick = value will result in sink being 'div.onclick'.
The note is wrong because el.onclick = 'string' wont trigger a violation. But also the sink value here doesn't match anywhere else in the spec. I would expect Element onclick personally?
The text was updated successfully, but these errors were encountered:
In the enforcement in event handler content attributes the sink name as specified does not match the rest of the spec.
The note is wrong because el.onclick = 'string' wont trigger a violation. But also the sink value here doesn't match anywhere else in the spec. I would expect
Element onclick
personally?The text was updated successfully, but these errors were encountered: