eliott/ladybird
1
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird synced 2026-04-26 01:35:08 +02:00
Code Issues Packages Projects Releases Wiki Activity

LibWeb: Implement Trusted Types for HTMLIFrameElement#srcdoc

Browse Source
This commit is contained in:
Luke Wilde
2025-10-31 11:51:57 +00:00
committed by Tim Flynn
parent 0f3a9a6958
commit d211df8118
Notes: github-actions[bot] 2025-11-06 16:46:21 +00:00 
Author: https://github.com/Lubrsi
Commit: https://github.com/LadybirdBrowser/ladybird/commit/d211df81185
Pull-request: https://github.com/LadybirdBrowser/ladybird/pull/6632
Reviewed-by: https://github.com/AtkinsSJ
8 changed files with 49 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
Libraries/LibWeb/HTML/HTMLIFrameElement.cpp
View File

@@ -19,6 +19,8 @@
#include <LibWeb/HTML/Parser/HTMLParser.h>
#include <LibWeb/HTML/TraversableNavigable.h>
#include <LibWeb/Layout/NavigableContainerViewport.h>
#include <LibWeb/TrustedTypes/TrustedTypePolicy.h>
#include <LibWeb/TrustedTypes/RequireTrustedTypesForDirective.h>
namespace Web::HTML {
@@ -305,4 +307,31 @@ void HTMLIFrameElement::set_current_navigation_was_lazy_loaded(bool value)
set_potentially_delays_the_load_event(!value);
}
// https://html.spec.whatwg.org/multipage/iframe-embed-object.html#dom-iframe-srcdoc
TrustedTypes::TrustedHTMLOrString HTMLIFrameElement::srcdoc()
{
// 1. Let attribute be the result of running get an attribute by namespace and local name given null, srcdoc's
// local name, and this.
// 2. If attribute is null, then return the empty string.
// 3. Return attribute's value.
return Utf16String::from_utf8(get_attribute_value(AttributeNames::srcdoc));
}
// https://html.spec.whatwg.org/multipage/iframe-embed-object.html#dom-iframe-srcdoc
WebIDL::ExceptionOr<void> HTMLIFrameElement::set_srcdoc(TrustedTypes::TrustedHTMLOrString const& value)
{
// 1. Let compliantString be the result of invoking the Get Trusted Type compliant string algorithm with
// TrustedHTML, this's relevant global object, the given value, "HTMLIFrameElement srcdoc", and "script".
auto const compliant_string = TRY(TrustedTypes::get_trusted_type_compliant_string(
TrustedTypes::TrustedTypeName::TrustedHTML,
HTML::relevant_global_object(*this),
value,
TrustedTypes::InjectionSink::HTMLIFrameElementsrcdoc,
TrustedTypes::Script.to_string()));
// 2. Set an attribute value given this, srcdoc's local name, and compliantString.
set_attribute_value(AttributeNames::srcdoc, compliant_string.to_utf8_but_should_be_ported_to_utf16());
return {};
}
}