5 ms·
> Why write Fixed-Point HTML? > simply the satisfaction of knowing that you and the browser are in total agreement So, just to clarify: there's no technical b
by PaulStatezny 4y ago
> Why write Fixed-Point HTML?
> simply the satisfaction of knowing that you and the browser are in total agreement
So, just to clarify: there's no technical benefit, correct?
- deleted 4y ago[deleted]
- eyelidlessness 4y agoThere actually may be! Depending on what you’re trying to do and what’s inconsistent between your markup and the actual DOM. As noted in my earlier comment, implicit insertion/wrapping of certain elements can cause structural changes which lead to actual code errors or unexpected behavior.
- kevincox 4y agoCSS errors are also common here. Especially with the child selector.
- nyanpasu64 4y agoMy favorite example of the technical failings of HTML: https://research.securitum.com/mutation-xss-via-mathml-mutation-dompurify-2-0-17-bypass/ https://research.securitum.com/mutation-xss-via-mathml-mutat... is a HTML sanitizing vulnerability that came about because some HTML not only doesn't survive a parse-stringify cycle, but the generated DOM tree does not survive a stringify-parse cycle!