From b8c02818cb56bc6c4233afbade8d9fa39eae6f02 Mon Sep 17 00:00:00 2001 From: Noam Rosenthal Date: Thu, 2 Jul 2026 10:50:23 +0100 Subject: [PATCH 1/4] createParserOptions --- source | 298 ++++++++++++++++++++++++++++----------------------------- 1 file changed, 145 insertions(+), 153 deletions(-) diff --git a/source b/source index a6b93957fa3..61453fece6e 100644 --- a/source +++ b/source @@ -4994,6 +4994,7 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute
  • data
  • TrustedScriptURL
  • get trusted type compliant string
    • +
  • get trusted type compliant input
    • @@ -125727,8 +125728,12 @@ enum DOMParserSupportedType {

  • Let target be this's template contents if this is a template element; otherwise this.

    • -

  • Set and filter HTML given target, html, - options, and true.

    • +

  • Let fragment be the result of invoking the fragment parsing algorithm + steps given target, html, options, and "remove".

    • + +

  • If fragment is non-null, then replace + all with fragment within target.

    • @@ -125738,8 +125743,12 @@ enum DOMParserSupportedType { steps are:

      -

    1. Set and filter HTML given this, html, - options, and true.

      2. +

    2. Let fragment be the result of invoking the fragment parsing algorithm + steps given this, html, options, and "remove".

      3. + +

    3. If fragment is non-null, then replace + all with fragment within this.

    @@ -125749,17 +125758,21 @@ enum DOMParserSupportedType { method steps are:

      -

    1. Let compliantHTML be the result of invoking the get trusted type compliant string algorithm with

      Let (compliantHTML, compliantOptions) be the result of invoking the + get trusted type compliant input algorithm with TrustedHTML, this's relevant global - object, html, "Element setHTMLUnsafe", and "script".

      2. + object, html, options, and "Element + setHTMLUnsafe".

    2. Let target be this's template contents if this is a template element; otherwise this.

      3. -

    3. Set and filter HTML given target, compliantHTML, - options, and false.

      4. +

    4. Let fragment be the result of invoking the fragment parsing algorithm + steps given target, compliantHTML, compliantOptions, and + "keep".

      5. + +

    5. If fragment is non-null, then replace + all with fragment within target.

    @@ -125769,14 +125782,18 @@ enum DOMParserSupportedType { options) method steps are:

      -

    1. Let compliantHTML be the result of invoking the get trusted type compliant string algorithm with

      Let (compliantHTML, compliantOptions) be the result of invoking the + get trusted type compliant input algorithm with TrustedHTML, this's relevant global - object, html, "ShadowRoot setHTMLUnsafe", and "script".

      2. + object, html, options, and "ShadowRoot + setHTMLUnsafe".

      + +

    2. Let fragment be the result of invoking the fragment parsing algorithm + steps given this, compliantHTML, compliantOptions, and + "keep".

      3. -

    3. Set and filter HTML given this, compliantHTML, - options, and false.

      4. +

    4. If fragment is non-null, then replace + all with fragment within this.

    @@ -125820,11 +125837,11 @@ enum DOMParserSupportedType { method steps are:

      -

    1. Let compliantHTML be the result of invoking the get trusted type compliant string algorithm with

      Let (compliantHTML, compliantOptions) be the result of invoking the + get trusted type compliant input algorithm with TrustedHTML, this's relevant global - object, html, "Document parseHTMLUnsafe", and "script".

      2. + object, html, options, and "Document + parseHTMLUnsafe".

    2. Let document be a new Document, whose DOMParserSupportedType { compliantHTML.

    3. Let sanitizer be the result of calling get a sanitizer instance from - options with options and false.

      4. + options with compliantOptions and false.

    4. Call sanitize on document with sanitizer and false.

      5. @@ -125957,21 +125974,66 @@ enum DOMParserSupportedType {

      The fragment parsing algorithm steps, given an Element or - DocumentFragment target, a string markup, and an optional - parser scripting mode scriptingMode (default Inert), are:

      + DocumentFragment target, a string markup, a dictionary + options, and unsafeMarkupHandling, which is one of "remove", "keep", or "legacy", + are:

        -

      1. Assert: scriptingMode is either Inert or Fragment. +

      2. Let context be target if target is an + Element; otherwise target's host.

        3. + +

      3. Assert: context is non-null.

        4. + +
      4. +

        If all of the following are true:

        +
          +
        • unsafeMarkupHandling is "remove";
          • +
        • context's local name is + "script"; and
          • +
        • context's namespace is the + HTML namespace or the SVG namespace,
          • +
        +

        then return null.

        +
        5. + +

      5. Let safe be true if unsafeMarkupHandling is "remove"; otherwise false.

        6. + +

      6. Let sanitizer be the result of calling getting a sanitizer from options given safe.

        7. -

      7. If target's node document is an XML +

      8. Let scriptingMode be Inert.

        9. + +
      9. +

        If options["runScripts"] + is true:

        +
          +

        1. Assert: unsafeMarkupHandling is not "remove".

          2. + +

        2. Set scriptingMode to Fragment.

          3. +
        +
        10. + +

      10. Let allowDeclarativeShadowRoots be false if unsafeMarkupHandling is + "legacy"; otherwise true.

        11. + +

      11. If unsafeMarkupHandling is "legacy" and + target's node document is an XML document, then return the result of invoking the XML fragment parsing algorithm given target and markup.

        12. -

      12. Return the result of the HTML fragment parsing algorithm given - target, markup, false, and scriptingMode.

        13. +

      13. Let fragment be the result of the HTML fragment parsing algorithm + given target, markup, allowDeclarativeShadowRoots, and + scriptingMode.

        14. + +

      14. Sanitize fragment given sanitizer and + safe.

        15. + +

      15. Return fragment.

      @@ -125992,29 +126054,18 @@ enum DOMParserSupportedType { are:

        -

      1. Let compliantString be the result of invoking the get trusted type compliant string algorithm with TrustedHTML, this's relevant global - object, the given value, "Element innerHTML", and "script".

        2. - -

      2. Let target be this.

        3. - -
      3. -

        If target is a template element, then set target to the - template element's template contents (a - DocumentFragment).

        - -

        Setting innerHTML on a - template element will replace all the nodes in its template contents - rather than its children.

        -
        4. +

      4. Let (compliantString, compliantOptions) be the result of invoking + the get trusted type compliant input algorithm with + TrustedHTML, this's relevant global + object, the given value, a new SetHTMLUnsafeOptions dictionary, and "Element innerHTML".

        5. -

      5. Let fragment be the result of invoking the fragment parsing algorithm - steps with target and compliantString.

        6. +

      6. Let fragment be the result of invoking the fragment parsing algorithm + steps given this, compliantString, compliantOptions, + and "legacy".

        7. -

      7. Replace all with fragment - within target.

        8. +

      8. Replace all with fragment within + this.

      @@ -126023,14 +126074,15 @@ enum DOMParserSupportedType { steps are:

        -

      1. Let compliantString be the result of invoking the get trusted type compliant string algorithm with TrustedHTML, this's relevant global - object, the given value, "ShadowRoot innerHTML", and "script".

        2. +

      2. Let (compliantString, compliantOptions) be the result of invoking + the get trusted type compliant input algorithm with + TrustedHTML, this's relevant global + object, the given value, a new SetHTMLUnsafeOptions dictionary, and "ShadowRoot innerHTML".

      3. Let fragment be the result of invoking the fragment parsing algorithm - steps with this and compliantString.

        4. + steps given this, compliantString, compliantOptions, + and "legacy".

      4. Replace all with fragment within this.

        5. @@ -126088,30 +126140,31 @@ enum DOMParserSupportedType { are:

          -

        1. Let compliantString be the result of invoking the get trusted type compliant string algorithm with TrustedHTML, this's relevant global - object, the given value, "Element outerHTML", and "script".

          2. +

        2. Let (compliantString, compliantOptions) be the result of invoking + the get trusted type compliant input algorithm with + TrustedHTML, this's relevant global + object, the given value, a new SetHTMLUnsafeOptions dictionary, and "Element outerHTML".

          3. -

        3. Let parent be this's parent.

          4. +

        4. Let parent be this's parent.

          5. -

        5. If parent is null, return. There would be no way to obtain a - reference to the nodes created even if the remaining steps were run.

          6. +

        6. If parent is null, return. There would be no way to obtain a reference to the + nodes created even if the remaining steps were run.

          7. -

        7. If parent is a Document, throw a - "NoModificationAllowedError" DOMException.

          8. +

        8. If parent is a Document, throw a + "NoModificationAllowedError" DOMException.

          9. -

        9. If parent is a DocumentFragment, set parent to the - result of creating an element given this's - node document, "body", and the HTML - namespace.

          10. +

        10. If parent is a DocumentFragment, set parent to the + result of creating an element given this's + node document, "body", and the HTML + namespace.

          11. -

        11. Let fragment be the result of invoking the fragment parsing algorithm - steps given parent and compliantString.

          12. +

        12. Let fragment be the result of invoking the fragment parsing algorithm + steps given parent, compliantString, compliantOptions, + and "legacy".

          13. -

        13. Replace this with - fragment within this's parent.

          14. +

        14. Replace this with + fragment within this's parent.

        @@ -126165,11 +126218,11 @@ enum DOMParserSupportedType { string)         method steps are:

          -

        1. Let compliantString be the result of invoking the get trusted type compliant string algorithm with TrustedHTML, this's relevant global - object, string, "Element insertAdjacentHTML", and "script".

          2. +

        2. Let (compliantString, compliantOptions) be the result of invoking + the get trusted type compliant input algorithm with + TrustedHTML, this's relevant global + object, the given value, a new SetHTMLUnsafeOptions dictionary, and "Element insertAdjacentHTML".

        3. Let context be null.

          4. @@ -126212,10 +126265,9 @@ enum DOMParserSupportedType { data-x="">body          ", and the HTML namespace.

          -
        4. -

          Let fragment be the result of invoking the fragment parsing algorithm - steps with context and compliantString.

          -
          5. +

        5. Let fragment be the result of invoking the fragment parsing algorithm + steps given context, compliantString, compliantOptions, + and "legacy".

        6. Use the first matching item from this list:
          @@ -126291,11 +126343,12 @@ enum DOMParserSupportedType { method steps are:

            -

          1. Let compliantString be the result of invoking the get - trusted type compliant string algorithm with TrustedHTML, this's relevant global - object, string, "Range createContextualFragment", and - "script".

            2. +

          2. Let (compliantString, compliantOptions) be the result of invoking + the get trusted type compliant input algorithm with + TrustedHTML, this's relevant global + object, string, a new SetHTMLUnsafeOptions whose runScripts is true, and "Range createContextualFragment".

          3. Let node be this's start node.

            4. @@ -126327,9 +126380,9 @@ enum DOMParserSupportedType { data-x="">body", and the HTML namespace.

            -

          4. Return the result of invoking the fragment parsing algorithm steps with - element, compliantString, and Fragment.

            5. +

          5. Return the result of invoking the fragment parsing algorithm steps given + element, compliantString, compliantOptions, and "legacy".

          @@ -127694,67 +127747,6 @@ dictionary SanitizerConfig {

          Sanitization algorithms

          -
          -

          To set and filter HTML, given an Element or - DocumentFragment target, a string html, a - dictionary options, and a boolean safe:

          - -
            -

          1. Let context be target if target is an - Element; otherwise target's host.

            2. - -

          2. Assert: context is non-null.

            3. - -
          3. -

            If all of the following are true:

            - -
              -

            • safe;

              • - -

            • context's local name is - "script"; and

              • - -

            • context's namespace is the - HTML namespace or the SVG namespace,

              • -
            - -

            then return.

            -
            4. - -

          4. Let sanitizer be the result of calling getting a sanitizer from options given safe.

            5. - -

          5. Let scriptingMode be Inert.

            6. - -
          6. -

            If options["runScripts"] - is true:

            - -
              -

            1. Assert: safe is false.

              2. - -

            2. Set scriptingMode to Fragment.

              -
            -
            7. - -
          7. -

            Let fragment be the result of invoking the HTML fragment parsing - algorithm given target, html, true, and - scriptingMode.

            - -

            Scripts in fragment will only execute once inserted into - target.

            -
            8. - -

          8. Sanitize fragment given sanitizer and - safe.

            9. - -

          9. Replace all with fragment within - target.

            10. -
          -

          To get a sanitizer instance from options from a dictionary options with a From 90a398292f0775d9d68993f1e4bcf333916dd1aa Mon Sep 17 00:00:00 2001 From: Noam Rosenthal Date: Mon, 13 Jul 2026 20:35:42 +0100 Subject: [PATCH 2/4] TrustedParseOptions in IDL --- source | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/source b/source index 61453fece6e..561c5cdfea0 100644 --- a/source +++ b/source @@ -4993,6 +4993,7 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute

        7. TrustedScript
        8. data
        9. TrustedScriptURL
          10. +
        10. TrustedParserOptions
        11. get trusted type compliant string
        12. get trusted type compliant input
          13. @@ -11635,7 +11636,7 @@ typedef (HTMLScriptElement or SVGScriptElement) LegacyOverrideBuiltIns] partial interface Document { - static Document parseHTMLUnsafe((TrustedHTML or DOMString) html, optional ParseHTMLUnsafeOptions options = {}); + static Document parseHTMLUnsafe((TrustedHTML or DOMString) html, optional (ParseHTMLUnsafeOptions or TrustedParserOptions) options = {}); static Document parseHTML(DOMString html, optional SetHTMLOptions options = {}); // resource metadata management @@ -125448,7 +125449,7 @@ document.body.appendChild(frame) 
          partial interface Element {
   [CEReactions] undefined setHTML(DOMString html, optional SetHTMLOptions options = {});
-  [CEReactions] undefined setHTMLUnsafe((TrustedHTML or DOMString) html, optional SetHTMLUnsafeOptions options = {});
+  [CEReactions] undefined setHTMLUnsafe((TrustedHTML or DOMString) html, optional (SetHTMLUnsafeOptions or TrustedParserOptions) options = {});
   DOMString getHTML(optional GetHTMLOptions options = {});
 
   [CEReactions] attribute (TrustedHTML or [LegacyNullToEmptyString] DOMString) innerHTML;
@@ -125458,7 +125459,7 @@ document.body.appendChild(frame)
          partial interface ShadowRoot { [CEReactions] undefined setHTML(DOMString html, optional SetHTMLOptions options = {}); - [CEReactions] undefined setHTMLUnsafe((TrustedHTML or DOMString) html, optional SetHTMLUnsafeOptions options = {}); + [CEReactions] undefined setHTMLUnsafe((TrustedHTML or DOMString) html, optional (SetHTMLUnsafeOptions or TrustedParserOptions) options = {}); DOMString getHTML(optional GetHTMLOptions options = {}); [CEReactions] attribute (TrustedHTML or [LegacyNullToEmptyString] DOMString) innerHTML; From a9a953594521ca0f9f7c0f85d3b18cd275e17d2d Mon Sep 17 00:00:00 2001 From: Noam Rosenthal Date: Mon, 13 Jul 2026 22:22:10 +0100 Subject: [PATCH 3/4] Still wrap things in set and filter HTML --- source | 124 ++++++++++++++++++++++++++++++++------------------------- 1 file changed, 69 insertions(+), 55 deletions(-) diff --git a/source b/source index 561c5cdfea0..1757016ef49 100644 --- a/source +++ b/source @@ -125729,12 +125729,8 @@ enum DOMParserSupportedType {

        13. Let target be this's template contents if this is a template element; otherwise this.

          14. -

        14. Let fragment be the result of invoking the fragment parsing algorithm - steps given target, html, options, and "remove".

          15. - -

        15. If fragment is non-null, then replace - all with fragment within target.

          16. +

        16. Set and filter HTML given target, + html, and options.

        @@ -125744,12 +125740,8 @@ enum DOMParserSupportedType { steps are:

          -

        1. Let fragment be the result of invoking the fragment parsing algorithm - steps given this, html, options, and "remove".

          2. - -

        2. If fragment is non-null, then replace - all with fragment within this.

          3. +

        3. Set and filter HTML given this, + html, and options.

        @@ -125768,12 +125760,9 @@ enum DOMParserSupportedType {

      5. Let target be this's template contents if this is a template element; otherwise this.

        6. -

      6. Let fragment be the result of invoking the fragment parsing algorithm - steps given target, compliantHTML, compliantOptions, and - "keep".

        7. - -

      7. If fragment is non-null, then replace - all with fragment within target.

        8. +

      8. Set and filter HTML given target, + compliantHTML, compliantOptions, and Unsafe.

      @@ -125789,12 +125778,9 @@ enum DOMParserSupportedType { object, html, options, and "ShadowRoot setHTMLUnsafe".

      -

    5. Let fragment be the result of invoking the fragment parsing algorithm - steps given this, compliantHTML, compliantOptions, and - "keep".

      6. - -

    6. If fragment is non-null, then replace - all with fragment within this.

      7. +

    7. Set and filter HTML given this, + compliantHTML, compliantOptions, and Unsafe.

    @@ -125973,12 +125959,46 @@ enum DOMParserSupportedType { +

    A fragment parser mode is one of the following:

    + +
    +
    Legacy
    +
    Unsafe elements and attributes are allowed, + while declarative shadow roots are ignored. + XML documents are parsed using the XML parser.
    + +
    Unsafe
    +
    Unsafe elements and attributes are allowed, + alongside declarative shadow roots.
    + +
    Normal
    +
    Unsafe elements and attributes are removed, + while declarative shadow roots are + allowed.
    +
    + +
    +

    To set and filter HTML, given an Element or + DocumentFragment target, a string html, a dictionary or TrustedParserOptions object options, and an + optional fragment parser mode mode (default Normal):

    + +
      +

    1. Let fragment be the result of invoking the fragment parsing algorithm + steps given target, html, options, and + mode.

      2. + +

    2. If fragment is non-null, then replace + all with fragment within target.

      3. +
    +
    +

    The fragment parsing algorithm steps, given an Element or - DocumentFragment target, a string markup, a dictionary - options, and unsafeMarkupHandling, which is one of "remove", "keep", or "legacy", - are:

    + DocumentFragment target, a string markup, a dictionary or TrustedParserOptions object options, and a + fragment parser mode mode, are:

    1. Let context be target if target is an @@ -125990,17 +126010,17 @@ enum DOMParserSupportedType {

    2. If all of the following are true:

        -
      • unsafeMarkupHandling is "remove";
        • +
      • mode is Normal;
      • context's local name is - "script"; and
        • -
      • context's namespace is the - HTML namespace or the SVG namespace,
        • + "script"; and
      • context's namespace is the HTML namespace or the + SVG namespace,

      then return null.

      3. -

    3. Let safe be true if unsafeMarkupHandling is "remove"; otherwise false.

      4. +

    4. Let safe be true if mode is Normal; otherwise false.

    5. Let sanitizer be the result of calling getting a sanitizer from options given safe.

      6. @@ -126011,18 +126031,18 @@ enum DOMParserSupportedType {

      If options["runScripts"] is true:

        -

      1. Assert: unsafeMarkupHandling is not "remove".

        2. +

      2. Assert: mode is not Normal.

      3. Set scriptingMode to Fragment.

      -

    6. Let allowDeclarativeShadowRoots be false if unsafeMarkupHandling is - "legacy"; otherwise true.

      7. +

    7. Let allowDeclarativeShadowRoots be false if mode is Legacy; otherwise true.

      8. -

    8. If unsafeMarkupHandling is "legacy" and +

    9. If mode is Legacy and target's node document is an XML document, then return the result of invoking the XML fragment parsing algorithm given target and markup.

      10. @@ -126061,12 +126081,9 @@ enum DOMParserSupportedType { object, the given value, a new SetHTMLUnsafeOptions dictionary, and "Element innerHTML".

      -

    10. Let fragment be the result of invoking the fragment parsing algorithm - steps given this, compliantString, compliantOptions, - and "legacy".

      11. - -

    11. Replace all with fragment within - this.

      12. +

    12. Set and filter HTML given this, + compliantString, compliantOptions, and Legacy.

    @@ -126081,12 +126098,9 @@ enum DOMParserSupportedType { object, the given value, a new SetHTMLUnsafeOptions dictionary, and "ShadowRoot innerHTML".

    -

  • Let fragment be the result of invoking the fragment parsing algorithm - steps given this, compliantString, compliantOptions, - and "legacy".

    • - -

  • Replace all with fragment - within this.

    • +

  • Set and filter HTML given this, + compliantString, compliantOptions, and Legacy.

    • @@ -126162,7 +126176,7 @@ enum DOMParserSupportedType {

  • Let fragment be the result of invoking the fragment parsing algorithm steps given parent, compliantString, compliantOptions, - and "legacy".

    • + and Legacy.

  • Replace this with fragment within this's parent.

    • @@ -126268,7 +126282,7 @@ enum DOMParserSupportedType {

  • Let fragment be the result of invoking the fragment parsing algorithm steps given context, compliantString, compliantOptions, - and "legacy".

    • + and Legacy.

  • Use the first matching item from this list:
    @@ -126382,8 +126396,8 @@ enum DOMParserSupportedType {

  • Return the result of invoking the fragment parsing algorithm steps given - element, compliantString, compliantOptions, and "legacy".

    • + element, compliantString, compliantOptions, and Legacy.

    From 91e333c0284d084023439358cf37ef181bda969e Mon Sep 17 00:00:00 2001 From: Noam Rosenthal Date: Fri, 17 Jul 2026 14:13:19 +0100 Subject: [PATCH 4/4] Add clarification about XMLL vs HTML --- source | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/source b/source index 1757016ef49..439edb92726 100644 --- a/source +++ b/source @@ -125969,12 +125969,13 @@ enum DOMParserSupportedType {
    Unsafe
    Unsafe elements and attributes are allowed, - alongside declarative shadow roots.
    + alongside declarative shadow roots. The + HTML parser is used regardless of the type of document.
    Normal
    Unsafe elements and attributes are removed, - while declarative shadow roots are - allowed.
    + while declarative shadow roots are allowed. + The HTML parser is used regardless of the type of document.