Ready for Developer Testing: Renewed HTML insertion&streaming methods

6 views
Skip to first unread message

Chromestatus

unread,
7:52 AM (1 hour ago) 7:52 AM
to blin...@chromium.org, barryp...@chromium.org, foo...@chromium.org, nrose...@chromium.org
Contact emails
nrose...@chromium.org, foo...@chromium.org

Explainer
https://github.com/WICG/declarative-partial-updates/blob/main/dynamic-markup-revamped-explainer.md

Specification
https://github.com/WICG/declarative-partial-updates/blob/main/dynamic-markup-revamped-explainer.md#resulting-api

Summary
Expose multiple HTML setting methods that provide a coherent story for dynamically inserting markup into an existing document. - Positional methods (before/after/append/prepend/replaceWith) that take HTML as argument, effectively replacing insertAdjacentHTML. - Streaming methods (stream{Append}HTML{Unsafe}) which return a WritableStream - Sending {runScripts} as part of SetHTMLUnsafeOptions, mimicking createContextualFragment behavior. - Supporting createParserOptions in trusted types, allowing trusted types to override scripting mode and sanitizer.

Blink component
Blink>HTML>Parser

Web Feature ID
domparser

Goals for experimentation
None

Risks


Interoperability and Compatibility
No information provided

Gecko: No signal (https://github.com/mozilla/standards-positions/issues/1370)

WebKit: No signal (https://github.com/WebKit/standards-positions/issues/629)

Web developers: Positive (https://github.com/whatwg/html/issues/2142) See also https://github.com/whatwg/html/issues/10122

Other signals:

Security
Since this is about dynamic markup insertion, XSS needs to be carefully handled, and specifically integration with the sanitizer and trusted types. This has been a major design consideration.

WebView application risks

Does this intent deprecate or change behavior of existing APIs, such that it has potentially high risk for Android WebView-based applications?

No information provided


Debuggability
No information provided

Will this feature be supported on all six Blink platforms (Windows, Mac, Linux, ChromeOS, Android, and Android WebView)?
Yes

Is this feature fully tested by web-platform-tests?
Yes
https://wpt.fyi/results/domparsing/tentative?label=master&label=experimental&aligned

Flag name on about://flags
No information provided

Finch feature name
NewHTMLSettingMethods

Requires code in //chrome?
False

Tracking bug
https://issues.chromium.org/issues/491743369

Estimated milestones
DevTrial on desktop148
DevTrial on Android148


Link to entry on the Chrome Platform Status
https://chromestatus.com/feature/5054329641893888

This intent message was generated by Chrome Platform Status.
Reply all
Reply to author
Forward
0 new messages