Skip to content

Commit

Permalink
Is-element-nonceable should check if the attribute's name |contains| …
Browse files Browse the repository at this point in the history
…<script/<style>
  • Loading branch information
evilpie committed Jan 15, 2024
1 parent aba284c commit 1823169
Showing 1 changed file with 4 additions and 6 deletions.
10 changes: 4 additions & 6 deletions index.bs
Original file line number Diff line number Diff line change
Expand Up @@ -4108,13 +4108,11 @@ this algorithm returns normally if compilation is allowed, and throws a
2. If |element| is a <{script}> element, then <a for=list>for each</a> |attribute| of
|element|'s <a for=Element>attribute list</a>:

1. If |attribute|'s name is an <a>ASCII case-insensitive</a> match for
the string "<code>&lt;script</code>" or the string
"<code>&lt;style</code>", return "`Not Nonceable`".
1. If |attribute|'s name contains an <a>ASCII case-insensitive</a> match for
"<code>&lt;script</code>" or "<code>&lt;style</code>", return "`Not Nonceable`".

2. If |attribute|'s value contains an <a>ASCII case-insensitive</a> match
the string "<code>&lt;script</code>" or the string
"<code>&lt;style</code>", return "`Not Nonceable`".
2. If |attribute|'s value contains an <a>ASCII case-insensitive</a> match for
"<code>&lt;script</code>" or "<code>&lt;style</code>", return "`Not Nonceable`".

3. If |element| had a [=duplicate-attribute=] [=parse error=] during tokenization, return
"`Not Nonceable`".
Expand Down

0 comments on commit 1823169

Please sign in to comment.