#198: Trusted Types

Visit on Github.

Opened Sep 18, 2017

Hello TAG!

This is earlier than I'd usually ask for y'all's feedback, but since I'm talking about a type system, it seems reasonable to get some sort of directional feedback from y'all before getting to far ahead of things.

We'd prefer the TAG provide feedback as (please select one):

  • open issues in our Github repo for each point of feedback
  • open a single issue in our Github repo for the entire review
  • leave review feedback as a comment in this issue and @-notify @mikewest

Again, there's not much concrete in the explainer, and we're pretty far away from having a spec. So now's a great time to give fundamental feedback on the notion of adding this kind of type system to DOM manipulations. We'd love to hear it. :)

Discussions

2019-01-22

Minutes

Peter: mwest asked to re-open and take a look--there have been changes...

Travis: Haven't looked yet. Can keep it for the f2f.

Peter: bumping to F2F.

2019-02-26

Minutes

Some feedback from 19 days ago.

Dan: Travis left feedback 20 days ago and there was a reply.

Sangwhan: i had one piece of feedback. David also had feedback. My main issue was this was only exposed to window.

Peter: they gave feedback on that point.

Sanghan: not entirely convinced so will have to write back on this one.

Peter: how about the rest of it?

Sangwhan: i think we wantt to get david's feeedback as well.

Dan: Agreed.

Sangwhan: everyone needs to comment back who have raised issues here.

Peter: actions on us to continue to leave feedback -

Sangwhan: let's bump to next week.

2020-01-27

Minutes

Alice: Lukasz said that it was going to ship in Chrome soon, let me check

Alice: Origin trial ended, it hasn't shipped yet, there are no LGTMs on the Intent thread.

Alice: Anne pointed out on the intent thread that there are a bunch of open issues

... BZ commented: To be clear, Mozilla is interested in solving some of the problems Trusted Types aim to solve, but last I checked our general feeling at this time is that the specific Trusted Types proposal at hand may not be the right solution, and has various known and unaddressed design-level problems."

... Daniel V responded: "Known and unaddressed design-level problems" is new feedback for us. We're happy to pause this intent while we figure out those areas of disagreement."

... Then, a fuller list of issues:

  • DOM node manipulation and the <script> tag.
  • Extensibility
  • Developer support / Support by Frameworks

Tess: maybe we should ask on the Intent thread for specific issue links for the above things, instead of spelunking in the issues & PRs ourselves?

Alice commented on the TAG design review issue asking for specific issue numbers for the above remaining issues.