Drop blocked nodes instead of leaking their text

Author: geeknik

crates/parser/src/html/converter.rs

@@ -107,7 +107,7 @@ fn convert_node_recursive(
                 _metrics,
             )?;
         }
-    } else {
+    } else if matches!(kuchiki_node.data(), KuchikiNodeData::Document(_)) {
         // For document nodes, just process children directly
         for child in kuchiki_node.children() {
             convert_node_recursive(
@@ -120,6 +120,9 @@ fn convert_node_recursive(
                 _metrics,
             )?;
         }
+    } else {
+        // Blocked element: drop entire subtree to avoid leaking script/style contents
+        tracing::debug!("🚫 Dropping blocked node and its children");
     }
 
     Ok(())
@@ -386,4 +389,4 @@ mod tests {
             }
         }
     }
-}
+}

crates/parser/tests/test_servo_css_integration.rs

@@ -105,7 +105,7 @@ mod tests {
 
         // Verify that security analysis was performed
         if let Some(analysis) = &result.security_analysis {
-            assert!(analysis.threat_level != css_security::ThreatLevel::Safe, "Should detect threats");
+            assert!(analysis.threat_level != css_security::CssThreatLevel::Safe, "Should detect threats");
             assert!(analysis.violations_count > 0, "Should detect violations");
         }