commit 6791c71836b166ba377aa5a8a9c2e8a2c9f397e3
parent c088e7f0261d9def83d2f87eb5b5ef71df021cf0
Author: Andy Paicu <andypaicu@chromium.org>
Date: Tue, 14 Oct 2025 22:24:28 +0000
Bug 1993460 [wpt PR 55298] - [PEPC] Remove contain from list of allowed properties, a=testonly
Automatic update from web-platform-tests
[PEPC] Remove contain from list of allowed properties
`contain` was incorrectly evaluated as benign, but it seems certain
values can be abused to obscure the text of the element.
Fixed: 433818339
Change-Id: I75d04180c2cf09a70ba589d22cdabe95ccf392fc
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7016607
Reviewed-by: Anders Hartvoll Ruud <andruud@chromium.org>
Commit-Queue: Andy Paicu <andypaicu@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1526757}
--
wpt-commits: 9577633f7755b4eab35aea1d8f4653a33eb518ca
wpt-pr: 55298
Diffstat:
1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/testing/web-platform/tests/html/semantics/permission-element/invalid-css-properties.tentative.html b/testing/web-platform/tests/html/semantics/permission-element/invalid-css-properties.tentative.html
@@ -19,6 +19,7 @@
border: 0px;
cursor: none;
content-visibility: hidden;
+ contain: size;
}
</style>
@@ -36,6 +37,7 @@
assert_equals(getComputedStyle(el_with_negatives).transform, "none", "transform");
assert_equals(getComputedStyle(el_with_negatives).cursor, "pointer", "cursor");
assert_equals(getComputedStyle(el_with_negatives).contentVisibility, "visible", "content-visibility");
+ assert_equals(getComputedStyle(el_with_negatives).contain, "none", "contain");
}, "None of the listed properties should be applied");
</script>
</body>
\ No newline at end of file
