DescriptionHTMLMetaElement should not run script inside ::insertedInto
To eventually remove the ChildNodesLazySnapshot we need to stop allowing
script to run inside ::insertedInto. It's also important since even with
the lazy snapshot we still keep getting security bugs down there.
This starts the process of removal by switching HTMLMetaElement to use
a post insertion callback.
R=ojan@chromium.org,abarth@chromium.org
BUG=357435
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=170267
Patch Set 1 #
Messages
Total messages: 10 (0 generated)
|