3 ms·
<script> is even more complicated than <style> as far as the HTML spec goes, I think. (There’s parsing weirdness where the behaviour of <!-- in <script> depends
by minitech 6y ago
<script> is even more complicated than <style> as far as the HTML spec goes, I think. (There’s parsing weirdness where the behaviour of <!-- in <script> depends on whether </script> followed by --> is present somewhere, for example.) Not sure about whether DOMPurify supports non-executable <script>s.
- dataflow 6y agoOof. I'm not so worried about DOMPurify specifically but I've been thinking surely there's got to be some inconsistency between different browsers or libraries...