Repository navigation

Data URLs are not allowed to open top-level browsing contexts #1238

Closed

Labels

spec: EPUB 3.3status: completed

Milestone

opened

on Apr 19, 2021

Data URLs are forbidden from

manifest items
href attributes in svg and html (except when the document is loaded inside an iframe)

It's also technically forbidden from script window.open and document.open calls, but not sure we can enforce.

mattgarrish
added
spec: EPUB 3.3Impacting the support of EPUB 3.3
on Apr 19, 2021
rdeltour
added
status: acceptedReady to be further processed
on Nov 13, 2021
rdeltour
added this to the v5.0.0-beta-1 milestone on Nov 13, 2021
rdeltour
added
status: ready for implemThe issue is ready to be implemented
and removed
status: acceptedReady to be further processed
on Jan 23, 2022
rdeltour
added
status: in progressThe issue is being implemented by the development team
and removed
status: ready for implemThe issue is ready to be implemented
on Nov 15, 2022
rdeltour
added a commit that references this issue on Nov 28, 2022
feat: improve checking of data URLs
cbc0b2a
rdeltour
added
status: completedWork completed, can be closed
and removed
status: in progressThe issue is being implemented by the development team
on Dec 1, 2022
rdeltour
closed this as completedin cbc0b2a on Dec 7, 2022

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

spec: EPUB 3.3status: completed

Type

No type

Projects

No projects

Milestone

v5.0.0-beta

Relationships

None yet

Development

No branches or pull requests