New issue
Advanced search Search tips

Issue 827178 link

Starred by 2 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 3
Type: Bug



Sign in to add a comment

Web Animations: Determine if we need a document context for AnimationEffectTiming::setEasing

Project Member Reported by smcgruer@chromium.org, Mar 29 2018

Issue description

Currently AnimationEffectTiming::setEasing passes document=nullptr to TimingInput::SetTimingFunction. This has the effect that AnimationInputHelpers::ParseTimingFunction is called with document=nullptr, which means that the timing function string will always be parsed in an insecure context (https://cs.chromium.org/chromium/src/third_party/WebKit/Source/core/animation/AnimationInputHelpers.cpp?l=249&rcl=5c21746912005ce434562783d123591dc4719d98).

We should decide what to do here; should we continue to pass nullptr and accept the insecure context, or get the spec to specify what execution context should be used for timing function parsing in this instance (I don't *think* it currently specifies).
 

Sign in to add a comment