According to the spec (https://drafts.fxtf.org/css-masking-1/#placement):
----------------------8<----------------------
The compositing model follows the SVG compositing model [SVG11]: First the element is styled under absence of filter effects, masking, clipping and opacity. Then the element and its descendants are drawn on a temporary canvas. In a last step the following effects are applied to the element in order: filter effects [FILTER-EFFECTS], clipping, masking and opacity.
----------------------8<----------------------
This means that an element that has a blur filter and is clipped should not have blurring extending beyond the bounds of the clip.
Gecko implements this behavior, but neither Blink nor WebKit do.
Comment 1 by bugdroid1@chromium.org
, Nov 20