servo

mirror of https://github.com/servo/servo synced 2026-05-08 16:12:15 +02:00

Files

yvt c6bb3cc363 Implement the IDL security check (#28583 )

<https://heycam.github.io/webidl/#es-operations>
<https://html.spec.whatwg.org/multipage/#integration-with-idl>

This PR implements the IDL security check, which is an important (but
not only) mechanism to restrict cross-origin DOM accesses.

This implementation follows WebKit's behavior and not the specification
for the following reasons:

 - Neither Gecko nor WebKit implements the specification's behavior.
- This would require a relatively elaborate mechanism *just* to have
access to the target object's `CrossOriginProperties`.

---
- [x] `./mach build -d` does not report any errors
- [x] `./mach test-tidy` does not report any errors
- [ ] These changes fix #___ (GitHub issue number if applicable)

---
- [x] There are tests for these changes OR
- [ ] These changes do not require tests because ___

---------

Signed-off-by: Josh Matthews <josh@joshmatthews.net>
Co-authored-by: Josh Matthews <josh@joshmatthews.net>

2026-04-04 04:18:08 +00:00

api.html.template

script: Move code generation and webidl files to new script_bindings crate. (#35157 )

2025-01-24 20:47:43 +00:00

apis.html.template

script: Move code generation and webidl files to new script_bindings crate. (#35157 )

2025-01-24 20:47:43 +00:00

Bindings.conf

script: Modernize the HTMLElement WebIDL (#43904 )

2026-04-03 18:25:33 +00:00

codegen.py

Implement the IDL security check (#28583 )