-
Notifications
You must be signed in to change notification settings - Fork 105
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Added support and documentation for Trusted Types #160
Conversation
I'm not an expert on the trusted types directive, but the code looks good to me. Anyone else want to give a review for the docs and direction? @g-k ? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
r+ w/ nit wfm
Types are used to prevent client-side or DOM-XSS_. Trusted Types rely on | ||
the browser to enforce the policy that is provided to it. Currently, Trusted | ||
Types are supported on Chrome 83 and Android Webview. Many browsers are in the | ||
process of adding support. Check back for updated compatibility_. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nit: would be good to mention the polyfill too https://github.com/w3c/webappsec-trusted-types#polyfill
There are two trusted types PRs. This one and #158. This one has docs but that one was first. I appreciate all of the contributions but I'm not sure how best to proceed. |
CI is failing on #157 with a line length pep8 nit. I'm in favor of landing this one since CI is passing and it includes docs. |
I'll be looking into doing that today. |
Version 3.7 is now on PyPI |
Fixes #157