tosmolka
Repos
20
Followers
6

Events

AdGuard extension is not compatible with websites that adopted Trusted Types

Hello @maximtop , just checking, any update since the last time? We would greatly appreciate if this could be picked up soon, issue still affects large number of our users. Thank you.

Created at 1 week ago
issue comment
[Feature Request] Trusted Types support in JavaScript SDK

@licanhua , apologies, I did not submit the review so you were unable to see them. Comments should now be visible in the PR.

Created at 3 weeks ago
issue comment
[Feature Request] Trusted Types support in JavaScript SDK

@paulcam206 , @licanhua , do you plan to address my comments in the PR? Thank you.

Created at 3 weeks ago
Created at 2 months ago
Created at 2 months ago
pull request opened
Fix (ui): Use removeChild instead of innerHTML in icon/iconview

Suggested merge commit message

Fix (ui): Use removeChild instead of innerHTML in icon/iconview


Additional information

This PR fixes one of the issues mentioned in #10845 .

Created at 2 months ago
create branch
tosmolka create branch i/10845/ui/iconview
Created at 2 months ago
pull request opened
Fix (paste-from-office): Use innerText instead of innerHTML in filters/space

Suggested merge commit message

Fix (paste-from-office): Use innerText instead of innerHTML in filters/space


Additional information

This PR fixes one of the issues mentioned in #10845 .

Created at 2 months ago
create branch
tosmolka create branch i/10845/paste-from-office/filters/space
Created at 2 months ago
pull request opened
Fix (clipboard): Use Element.append instead of innerHTML in dragdrop.js

Suggested merge commit message

Fix (clipboard): Use Element.append instead of innerHTML in dragdrop.js


Additional information

This PR fixes one of the issues mentioned in #10845 .

Created at 2 months ago
create branch
tosmolka create branch i/10845/clipboard
Created at 2 months ago

Docs: changing master to stable for output link.

Docs: merge stable.

Docs: styles dropdown guide pt. 1

Merge master.

Fixed the editor not starting. Improvements to the snippet.

Enhanced snippet content.

Docs: styles guide.

Docs: demo content; configuration section.

Docs: restoring changes in additional files.

Merge master.

Docs: a typo.

Merge master.

Docs: minor fixes.

Docs: minor fixes.

Merge master.

Merge stable.

Merge branch 'master' into ck/11331-styles-dropdown-guide

Minor improvements to the style feature guide demo content.

Docs: common API.

Improvements to the style guide and demo.

Created at 2 months ago
delete branch
tosmolka delete branch i/10845/filler
Created at 2 months ago
AdGuard extension is not compatible with websites that adopted Trusted Types

@maximtop , do you have an update regarding the issue? Any timelines for the fix? This is still affecting large number of our customers. Thank you.

Created at 2 months ago
issue comment
Support sanitization of attributes that require Trusted Types

Yes please but we can wait a week or two if needed.

Created at 2 months ago
issue comment
DOMPurify fails on sanitization of Trusted Types sink attributes

@cure53 , there was no response from Chromium team and we are starting to get blocked on this issue. I raised PR 699 that proposes fix for attributes without namespaces. This should be enough for our use case.

Can you pls take a look? Thank you.

Created at 2 months ago
pull request opened
Support sanitization of attributes that require Trusted Types

Summary

This PR should fix 660 for attributes without namespace.

Background & Context

We want to use DOMPurify to allow script.src attribute and provide custom src validation via hooks. This is not possible today as DOMPurify will call setAttribute with raw string and cause Trusted Types Sink violation.

This PR leverages TrustedTypePolicyFactory.getAttributeType() to handle such cases.

Created at 2 months ago
Created at 2 months ago
create branch
tosmolka create branch tosmolka/660
Created at 2 months ago

Stop trimming value attributes

Update .gitignore

fix: node.outerHTML = emptyHTML causes TT Sink violation

Merge pull request #622 from tosmolka/tosmolka/fix-emptyHTML

fix: node.outerHTML = emptyHTML causes TT Sink violation

chore: remove deprecated lodash.isarray

Update attrs.js

Merge pull request #623 from is2ei/remove-lodash.isarray

chore: remove deprecated lodash.isarray

Merge pull request #624 from rzhade3/patch-1

Allow transform-origin attribute in SVGs

chore: remove deprecated rollup-watch package

Merge pull request #626 from is2ei/remove-rollup-watch

chore: remove deprecated rollup-watch package

chore: update bundle

Merge pull request #627 from is2ei/build-latest-code

chore: update bundle

chore: remove deprecated package babel

Merge pull request #628 from is2ei/remove-babel

chore: remove deprecated package babel

chore: run format

Merge pull request #629 from is2ei/run-format

chore: run format

chore: bump karma-chrome-launcher

Merge pull request #630 from is2ei/bump-karma-chrome-launcher

chore: bump karma-chrome-launcher

chore: bump karma-firefox-launcher

Merge pull request #631 from is2ei/bump-karma-firefox-launcher

chore: bump karma-firefox-launcher

Created at 2 months ago