From 3b31f7653ed12f18a981685a372e1d8c56990418 Mon Sep 17 00:00:00 2001
From: Luke Warlow <lwarlow@igalia.com>
Date: Wed, 12 Jun 2024 14:42:06 +0000
Subject: [PATCH] Update HTML Parser steps for script element to set "script
 text" (#499)

SHA: a1862e540904d7015747f99bbf622e459bd9b7aa
Reason: push, by lukewarlow

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 dist/spec/index.html | 38 ++++++++++++++++++++++++++++++--------
 1 file changed, 30 insertions(+), 8 deletions(-)

diff --git a/dist/spec/index.html b/dist/spec/index.html
index 6b0175f..dfa19d6 100644
--- a/dist/spec/index.html
+++ b/dist/spec/index.html
@@ -7,7 +7,7 @@
   <link href="https://www.w3.org/StyleSheets/TR/2021/W3C-ED" rel="stylesheet">
   <meta content="Bikeshed version 82ce88815, updated Thu Sep 7 16:33:55 2023 -0700" name="generator">
   <link href="https://www.w3.org/TR/trusted-types/" rel="canonical">
-  <meta content="92390d1f2cf5f40641346621cc0369bd6af3ff74" name="document-revision">
+  <meta content="a1862e540904d7015747f99bbf622e459bd9b7aa" name="document-revision">
 <style>/* Boilerplate: style-autolinks */
 .css.css, .property.property, .descriptor.descriptor {
     color: var(--a-normal-text);
@@ -1124,7 +1124,8 @@ <h2 class="no-num no-toc no-ref" id="contents">Table of Contents</h2>
           <li><a href="#the-textContent-idl-attribute"><span class="secno">4.1.2.3</span> <span class="content">The <code class="idl"><span>textContent</span></code> IDL attribute</span></a>
           <li><a href="#the-text-idl-attribute"><span class="secno">4.1.2.4</span> <span class="content">The <code class="idl"><span>text</span></code> IDL attribute</span></a>
           <li><a href="#the-src-idl-attribute"><span class="secno">4.1.2.5</span> <span class="content">The <code class="idl"><span>src</span></code> IDL attribute</span></a>
-          <li><a href="#slot-value-verification"><span class="secno">4.1.2.6</span> <span class="content">Slot value verification</span></a>
+          <li><a href="#setting-slot-values-from-parser"><span class="secno">4.1.2.6</span> <span class="content">Setting slot values from parser</span></a>
+          <li><a href="#slot-value-verification"><span class="secno">4.1.2.7</span> <span class="content">Slot value verification</span></a>
          </ol>
         <li><a href="#host-ensure-can-compile-strings"><span class="secno">4.1.3</span> <span class="content">HostEnsureCanCompileStrings</span></a>
         <li><a href="#host-get-code-for-eval"><span class="secno">4.1.4</span> <span class="content">HostGetCodeForEval</span></a>
@@ -2333,7 +2334,23 @@ <h5 class="heading settled" data-level="4.1.2.5" id="the-src-idl-attribute"><spa
     <li data-md>
      <ins>Set <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#this" id="ref-for-this①⑧">this</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/#attr-script-src" id="ref-for-attr-script-src">src</a> content attribute to <var>value</var>.</ins>
    </ol>
-   <h5 class="heading settled" data-level="4.1.2.6" id="slot-value-verification"><span class="secno">4.1.2.6. </span><span class="content">Slot value verification</span><a class="self-link" href="#slot-value-verification"></a></h5>
+   <h5 class="heading settled" data-level="4.1.2.6" id="setting-slot-values-from-parser"><span class="secno">4.1.2.6. </span><span class="content">Setting slot values from parser</span><a class="self-link" href="#setting-slot-values-from-parser"></a></h5>
+   <p>This document modifies the HTML parser to set the <a data-link-type="dfn" href="#htmlscriptelement-script-text" id="ref-for-htmlscriptelement-script-text⑤">script text</a> value when the script is created.</p>
+   <p>Modify the <a data-link-type="dfn" href="https://html.spec.whatwg.org/#parsing-main-incdata" id="ref-for-parsing-main-incdata">The text insertion mode</a> algorithm as follows:</p>
+   <dl class="switch">
+    <dt id="scriptEndTag"><a class="self-link" href="#scriptEndTag"></a>An end tag whose tag name is "script"
+    <dd>
+     <p>...</p>
+     <ins>
+      <p>Set <var>script</var>’s <a data-link-type="dfn" href="#htmlscriptelement-script-text" id="ref-for-htmlscriptelement-script-text⑥">script text</a> value to its <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-child-text-content" id="ref-for-concept-child-text-content④">child text content</a>.</p>
+     </ins>
+     <p>If the <span>active speculative HTML parser</span> is null, then <span>prepare the script
+        element</span> <var>script</var>. This might cause some script to execute, which might cause <span data-x="dom-document-write">new characters to be inserted into the tokenizer</span>, and
+        might cause the tokenizer to output more tokens, resulting in a <a data-link-type="dfn" href="https://html.spec.whatwg.org/#nestedParsing" id="ref-for-nestedParsing">reentrant invocation of the parser</a>.</p>
+     <p>...</p>
+   </dl>
+   <p class="issue" id="issue-d247526d"><a class="self-link" href="#issue-d247526d"></a> The above algorithm doesn’t account for the case when the script element’s content is changed mid-parse. Implementors should ensure they protect against this case. See <a href="https://github.com/w3c/trusted-types/issues/507">https://github.com/w3c/trusted-types/issues/507</a>.</p>
+   <h5 class="heading settled" data-level="4.1.2.7" id="slot-value-verification"><span class="secno">4.1.2.7. </span><span class="content">Slot value verification</span><a class="self-link" href="#slot-value-verification"></a></h5>
    <p>The first few steps of the <a data-link-type="dfn" href="https://html.spec.whatwg.org/#prepare-the-script-element" id="ref-for-prepare-the-script-element">prepare the script element</a> algorithm are modified as follows:</p>
    <ol>
     <li>
@@ -2358,7 +2375,7 @@ <h5 class="heading settled" data-level="4.1.2.6" id="slot-value-verification"><s
      <p>
       Let <var>source text</var> be <var>el</var>’s 
       <del><a data-x-internal="child-text-content" href="https://dom.spec.whatwg.org/#concept-child-text-content" id="script-processing-model:child-text-content">child text content</a>.</del>
-      <ins><a data-link-type="dfn" href="#htmlscriptelement-script-text" id="ref-for-htmlscriptelement-script-text⑤">script text</a> value.</ins>
+      <ins><a data-link-type="dfn" href="#htmlscriptelement-script-text" id="ref-for-htmlscriptelement-script-text⑦">script text</a> value.</ins>
      </p>
     <li>... 
    </ol>
@@ -2873,9 +2890,11 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="b815ad04">parseFromString(string, type)</span>
      <li><span class="dfn-paneled" id="215d47ca">prepare the script element</span>
      <li><span class="dfn-paneled" id="b75a7d23">realm</span>
+     <li><span class="dfn-paneled" id="e7762445">reentrant invocation of the parser</span>
      <li><span class="dfn-paneled" id="e99bd18e">relevant global object</span>
      <li><span class="dfn-paneled" id="f7433a4f">set the inner text steps</span>
      <li><span class="dfn-paneled" id="ff5484a3">src</span>
+     <li><span class="dfn-paneled" id="c62c4764">the text insertion mode</span>
     </ul>
    <li>
     <a data-link-type="biblio">[INFRA]</a> defines the following terms:
@@ -2948,6 +2967,7 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
   <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content">Issues Index</span><a class="self-link" href="#issues-index"></a></h2>
   <div style="counter-reset:issue">
    <div class="issue"> The <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#event-handler-content-attributes">event handler content attribute</a> concept used below is ambiguous. This spec needs a better mechanism to identify event handler attributes. See <a href="https://github.com/w3c/trusted-types/issues/520">https://github.com/w3c/trusted-types/issues/520</a>. <a class="issue-return" href="#issue-15b3006c" title="Jump to section">↵</a></div>
+   <div class="issue"> The above algorithm doesn’t account for the case when the script element’s content is changed mid-parse. Implementors should ensure they protect against this case. See <a href="https://github.com/w3c/trusted-types/issues/507">https://github.com/w3c/trusted-types/issues/507</a>. <a class="issue-return" href="#issue-d247526d" title="Jump to section">↵</a></div>
    <div class="issue"> Refer to the external document on secure policy design. <a class="issue-return" href="#issue-2eb927d2" title="Jump to section">↵</a></div>
   </div>
   <details class="mdn-anno unpositioned" data-anno-for="dom-trustedhtml-tojson">
@@ -3687,7 +3707,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['99573380'] = {"dfnID": "99573380", "url": "https://dom.spec.whatwg.org/#attr", "dfnText": "Attr", "refSections": [{"refs": [{"id": "ref-for-attr"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": true};
 window.dfnpanelData['85394472'] = {"dfnID": "85394472", "url": "https://dom.spec.whatwg.org/#document", "dfnText": "Document", "refSections": [{"refs": [{"id": "ref-for-document"}], "title": "2.1.1. DOM XSS injection sinks"}, {"refs": [{"id": "ref-for-document\u2460"}], "title": "3.6. Prepare the script text"}], "external": true};
 window.dfnpanelData['296f3551'] = {"dfnID": "296f3551", "url": "https://dom.spec.whatwg.org/#element", "dfnText": "Element", "refSections": [{"refs": [{"id": "ref-for-element"}, {"id": "ref-for-element\u2460"}], "title": "2.1.1. DOM XSS injection sinks"}, {"refs": [{"id": "ref-for-element\u2461"}, {"id": "ref-for-element\u2462"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-element\u2463"}], "title": "3.7. Get Trusted Types-compliant attribute value"}, {"refs": [{"id": "ref-for-element\u2464"}], "title": "3.8. Get Trusted Type data for attribute"}], "external": true};
-window.dfnpanelData['631f76db'] = {"dfnID": "631f76db", "url": "https://dom.spec.whatwg.org/#concept-child-text-content", "dfnText": "child text content", "refSections": [{"refs": [{"id": "ref-for-concept-child-text-content"}, {"id": "ref-for-concept-child-text-content\u2460"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-concept-child-text-content\u2461"}], "title": "4.1.2. Enforcement for scripts"}, {"refs": [{"id": "ref-for-concept-child-text-content\u2462"}], "title": "4.1.2.1. Slots with trusted values"}, {"refs": [{"id": "script-processing-model:child-text-content"}], "title": "4.1.2.6. Slot value verification"}], "external": true};
+window.dfnpanelData['631f76db'] = {"dfnID": "631f76db", "url": "https://dom.spec.whatwg.org/#concept-child-text-content", "dfnText": "child text content", "refSections": [{"refs": [{"id": "ref-for-concept-child-text-content"}, {"id": "ref-for-concept-child-text-content\u2460"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-concept-child-text-content\u2461"}], "title": "4.1.2. Enforcement for scripts"}, {"refs": [{"id": "ref-for-concept-child-text-content\u2462"}], "title": "4.1.2.1. Slots with trusted values"}, {"refs": [{"id": "ref-for-concept-child-text-content\u2463"}], "title": "4.1.2.6. Setting slot values from parser"}, {"refs": [{"id": "script-processing-model:child-text-content"}], "title": "4.1.2.7. Slot value verification"}], "external": true};
 window.dfnpanelData['f20f4175'] = {"dfnID": "f20f4175", "url": "https://dom.spec.whatwg.org/#concept-element-interface", "dfnText": "element interface", "refSections": [{"refs": [{"id": "ref-for-concept-element-interface"}, {"id": "ref-for-concept-element-interface\u2460"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": true};
 window.dfnpanelData['e1f8b538'] = {"dfnID": "e1f8b538", "url": "https://dom.spec.whatwg.org/#get-text-content", "dfnText": "get text content", "refSections": [{"refs": [{"id": "ref-for-get-text-content"}], "title": "4.1.2.3. The textContent IDL attribute"}], "external": true};
 window.dfnpanelData['e240317a'] = {"dfnID": "e240317a", "url": "https://dom.spec.whatwg.org/#concept-attribute-local-name", "dfnText": "local name", "refSections": [{"refs": [{"id": "ref-for-concept-attribute-local-name"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": true};
@@ -3716,11 +3736,13 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['a264b960'] = {"dfnID": "a264b960", "url": "https://html.spec.whatwg.org/multipage/dom.html#dom-innertext", "dfnText": "innerText", "refSections": [{"refs": [{"id": "ref-for-dom-innertext"}], "title": "4.1.2. Enforcement for scripts"}], "external": true};
 window.dfnpanelData['364094ea'] = {"dfnID": "364094ea", "url": "https://html.spec.whatwg.org/multipage/dynamic-markup-insertion.html#dom-element-outerhtml", "dfnText": "outerHTML", "refSections": [{"refs": [{"id": "ref-for-dom-element-outerhtml"}], "title": "2.1.1. DOM XSS injection sinks"}], "external": true};
 window.dfnpanelData['b815ad04'] = {"dfnID": "b815ad04", "url": "https://html.spec.whatwg.org/multipage/dynamic-markup-insertion.html#dom-domparser-parsefromstring", "dfnText": "parseFromString(string, type)", "refSections": [{"refs": [{"id": "ref-for-dom-domparser-parsefromstring"}], "title": "2.1.1. DOM XSS injection sinks"}], "external": true};
-window.dfnpanelData['215d47ca'] = {"dfnID": "215d47ca", "url": "https://html.spec.whatwg.org/#prepare-the-script-element", "dfnText": "prepare the script element", "refSections": [{"refs": [{"id": "ref-for-prepare-the-script-element"}], "title": "4.1.2.6. Slot value verification"}], "external": true};
+window.dfnpanelData['215d47ca'] = {"dfnID": "215d47ca", "url": "https://html.spec.whatwg.org/#prepare-the-script-element", "dfnText": "prepare the script element", "refSections": [{"refs": [{"id": "ref-for-prepare-the-script-element"}], "title": "4.1.2.7. Slot value verification"}], "external": true};
 window.dfnpanelData['b75a7d23'] = {"dfnID": "b75a7d23", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-global-object-realm", "dfnText": "realm", "refSections": [{"refs": [{"id": "ref-for-concept-global-object-realm"}], "title": "2.3. Policies"}, {"refs": [{"id": "ref-for-concept-global-object-realm\u2460"}], "title": "4.3.1. require-trusted-types-for directive"}], "external": true};
+window.dfnpanelData['e7762445'] = {"dfnID": "e7762445", "url": "https://html.spec.whatwg.org/#nestedParsing", "dfnText": "reentrant invocation of the parser", "refSections": [{"refs": [{"id": "ref-for-nestedParsing"}], "title": "4.1.2.6. Setting slot values from parser"}], "external": true};
 window.dfnpanelData['e99bd18e'] = {"dfnID": "e99bd18e", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global", "dfnText": "relevant global object", "refSections": [{"refs": [{"id": "ref-for-concept-relevant-global"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2460"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2461"}], "title": "3.7. Get Trusted Types-compliant attribute value"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2462"}], "title": "4.1.1. Extensions to the WindowOrWorkerGlobalScope interface"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2463"}], "title": "4.1.2.2. The innerText IDL attribute"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2464"}], "title": "4.1.2.3. The textContent IDL attribute"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2465"}], "title": "4.1.2.4. The text IDL attribute"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2466"}], "title": "4.1.2.5. The src IDL attribute"}], "external": true};
 window.dfnpanelData['f7433a4f'] = {"dfnID": "f7433a4f", "url": "https://html.spec.whatwg.org/#set-the-inner-text-steps", "dfnText": "set the inner text steps", "refSections": [{"refs": [{"id": "ref-for-set-the-inner-text-steps"}], "title": "4.1.2.2. The innerText IDL attribute"}], "external": true};
 window.dfnpanelData['ff5484a3'] = {"dfnID": "ff5484a3", "url": "https://html.spec.whatwg.org/#attr-script-src", "dfnText": "src", "refSections": [{"refs": [{"id": "ref-for-attr-script-src"}], "title": "4.1.2.5. The src IDL attribute"}], "external": true};
+window.dfnpanelData['c62c4764'] = {"dfnID": "c62c4764", "url": "https://html.spec.whatwg.org/#parsing-main-incdata", "dfnText": "the text insertion mode", "refSections": [{"refs": [{"id": "ref-for-parsing-main-incdata"}], "title": "4.1.2.6. Setting slot values from parser"}], "external": true};
 window.dfnpanelData['a3b18719'] = {"dfnID": "a3b18719", "url": "https://infra.spec.whatwg.org/#set-append", "dfnText": "append", "refSections": [{"refs": [{"id": "ref-for-set-append"}], "title": "3.1. Create a Trusted Type Policy"}], "external": true};
 window.dfnpanelData['6f2dfa22'] = {"dfnID": "6f2dfa22", "url": "https://infra.spec.whatwg.org/#ascii-lowercase", "dfnText": "ascii lowercase", "refSections": [{"refs": [{"id": "ref-for-ascii-lowercase"}, {"id": "ref-for-ascii-lowercase\u2460"}, {"id": "ref-for-ascii-lowercase\u2461"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": true};
 window.dfnpanelData['77b4c09a'] = {"dfnID": "77b4c09a", "url": "https://infra.spec.whatwg.org/#assert", "dfnText": "assert", "refSections": [{"refs": [{"id": "ref-for-assert"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": true};
@@ -3786,7 +3808,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['abstract-opdef-get-trusted-type-policy-value'] = {"dfnID": "abstract-opdef-get-trusted-type-policy-value", "url": "#abstract-opdef-get-trusted-type-policy-value", "dfnText": "Get Trusted Type policy value", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-policy-value"}], "title": "3.2. Create a Trusted Type"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-policy-value\u2460"}], "title": "3.5. Process value with a default policy"}], "external": false};
 window.dfnpanelData['abstract-opdef-get-trusted-type-compliant-string'] = {"dfnID": "abstract-opdef-get-trusted-type-compliant-string", "url": "#abstract-opdef-get-trusted-type-compliant-string", "dfnText": "Get Trusted Type compliant string", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2460"}], "title": "3.7. Get Trusted Types-compliant attribute value"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2461"}], "title": "4.1.2. Enforcement for scripts"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2462"}], "title": "4.1.2.2. The innerText IDL attribute"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2463"}], "title": "4.1.2.3. The textContent IDL attribute"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2464"}], "title": "4.1.2.4. The text IDL attribute"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2465"}], "title": "4.1.2.5. The src IDL attribute"}], "external": false};
 window.dfnpanelData['abstract-opdef-process-value-with-a-default-policy'] = {"dfnID": "abstract-opdef-process-value-with-a-default-policy", "url": "#abstract-opdef-process-value-with-a-default-policy", "dfnText": "Process value with a default policy", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-process-value-with-a-default-policy"}], "title": "3.4. Get Trusted Type compliant string"}, {"refs": [{"id": "ref-for-abstract-opdef-process-value-with-a-default-policy\u2460"}], "title": "4.3.1.1. require-trusted-types-for Pre-Navigation check"}], "external": false};
-window.dfnpanelData['abstract-opdef-prepare-the-script-text'] = {"dfnID": "abstract-opdef-prepare-the-script-text", "url": "#abstract-opdef-prepare-the-script-text", "dfnText": "Prepare the script text", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-prepare-the-script-text"}], "title": "4.1.2.6. Slot value verification"}], "external": false};
+window.dfnpanelData['abstract-opdef-prepare-the-script-text'] = {"dfnID": "abstract-opdef-prepare-the-script-text", "url": "#abstract-opdef-prepare-the-script-text", "dfnText": "Prepare the script text", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-prepare-the-script-text"}], "title": "4.1.2.7. Slot value verification"}], "external": false};
 window.dfnpanelData['abstract-opdef-get-trusted-type-data-for-attribute'] = {"dfnID": "abstract-opdef-get-trusted-type-data-for-attribute", "url": "#abstract-opdef-get-trusted-type-data-for-attribute", "dfnText": "Get Trusted Type data for attribute", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-data-for-attribute"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-data-for-attribute\u2460"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": false};
 window.dfnpanelData['typedefdef-trustedtype'] = {"dfnID": "typedefdef-trustedtype", "url": "#typedefdef-trustedtype", "dfnText": "TrustedType", "refSections": [{"refs": [{"id": "ref-for-typedefdef-trustedtype"}, {"id": "ref-for-typedefdef-trustedtype\u2460"}], "title": "3.4. Get Trusted Type compliant string"}, {"refs": [{"id": "ref-for-typedefdef-trustedtype\u2461"}, {"id": "ref-for-typedefdef-trustedtype\u2462"}], "title": "3.5. Process value with a default policy"}, {"refs": [{"id": "ref-for-typedefdef-trustedtype\u2463"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": false};
 window.dfnpanelData['window-trusted-type-policy-factory'] = {"dfnID": "window-trusted-type-policy-factory", "url": "#window-trusted-type-policy-factory", "dfnText": "trusted type policy factory", "refSections": [{"refs": [{"id": "ref-for-window-trusted-type-policy-factory"}], "title": "3.5. Process value with a default policy"}], "external": false};
@@ -3795,7 +3817,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['dom-htmlscriptelement-textcontent'] = {"dfnID": "dom-htmlscriptelement-textcontent", "url": "#dom-htmlscriptelement-textcontent", "dfnText": "textContent", "refSections": [{"refs": [{"id": "ref-for-dom-htmlscriptelement-textcontent"}, {"id": "ref-for-dom-htmlscriptelement-textcontent\u2460"}, {"id": "ref-for-dom-htmlscriptelement-textcontent\u2461"}], "title": "4.1.2.3. The textContent IDL attribute"}], "external": false};
 window.dfnpanelData['dom-htmlscriptelement-src'] = {"dfnID": "dom-htmlscriptelement-src", "url": "#dom-htmlscriptelement-src", "dfnText": "src", "refSections": [{"refs": [{"id": "ref-for-dom-htmlscriptelement-src"}], "title": "2.1.1. DOM XSS injection sinks"}, {"refs": [{"id": "ref-for-dom-htmlscriptelement-src\u2460"}, {"id": "ref-for-dom-htmlscriptelement-src\u2461"}], "title": "4.1.2.5. The src IDL attribute"}], "external": false};
 window.dfnpanelData['dom-htmlscriptelement-text'] = {"dfnID": "dom-htmlscriptelement-text", "url": "#dom-htmlscriptelement-text", "dfnText": "text", "refSections": [{"refs": [{"id": "ref-for-dom-htmlscriptelement-text"}], "title": "2.1.1. DOM XSS injection sinks"}, {"refs": [{"id": "ref-for-dom-htmlscriptelement-text\u2460"}, {"id": "ref-for-dom-htmlscriptelement-text\u2461"}], "title": "4.1.2.4. The text IDL attribute"}], "external": false};
-window.dfnpanelData['htmlscriptelement-script-text'] = {"dfnID": "htmlscriptelement-script-text", "url": "#htmlscriptelement-script-text", "dfnText": "script text", "refSections": [{"refs": [{"id": "ref-for-htmlscriptelement-script-text"}, {"id": "ref-for-htmlscriptelement-script-text\u2460"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-htmlscriptelement-script-text\u2461"}], "title": "4.1.2.2. The innerText IDL attribute"}, {"refs": [{"id": "ref-for-htmlscriptelement-script-text\u2462"}], "title": "4.1.2.3. The textContent IDL attribute"}, {"refs": [{"id": "ref-for-htmlscriptelement-script-text\u2463"}], "title": "4.1.2.4. The text IDL attribute"}, {"refs": [{"id": "ref-for-htmlscriptelement-script-text\u2464"}], "title": "4.1.2.6. Slot value verification"}], "external": false};
+window.dfnpanelData['htmlscriptelement-script-text'] = {"dfnID": "htmlscriptelement-script-text", "url": "#htmlscriptelement-script-text", "dfnText": "script text", "refSections": [{"refs": [{"id": "ref-for-htmlscriptelement-script-text"}, {"id": "ref-for-htmlscriptelement-script-text\u2460"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-htmlscriptelement-script-text\u2461"}], "title": "4.1.2.2. The innerText IDL attribute"}, {"refs": [{"id": "ref-for-htmlscriptelement-script-text\u2462"}], "title": "4.1.2.3. The textContent IDL attribute"}, {"refs": [{"id": "ref-for-htmlscriptelement-script-text\u2463"}], "title": "4.1.2.4. The text IDL attribute"}, {"refs": [{"id": "ref-for-htmlscriptelement-script-text\u2464"}, {"id": "ref-for-htmlscriptelement-script-text\u2465"}], "title": "4.1.2.6. Setting slot values from parser"}, {"refs": [{"id": "ref-for-htmlscriptelement-script-text\u2466"}], "title": "4.1.2.7. Slot value verification"}], "external": false};
 window.dfnpanelData['require-trusted-types-for-directive'] = {"dfnID": "require-trusted-types-for-directive", "url": "#require-trusted-types-for-directive", "dfnText": "require-trusted-types-for", "refSections": [{"refs": [{"id": "ref-for-require-trusted-types-for-directive"}], "title": "1.3. Use cases"}, {"refs": [{"id": "ref-for-require-trusted-types-for-directive\u2460"}], "title": "2.4.1. Content Security Policy"}, {"refs": [{"id": "ref-for-require-trusted-types-for-directive\u2461"}], "title": "4.3.1. require-trusted-types-for directive"}, {"refs": [{"id": "ref-for-require-trusted-types-for-directive\u2462"}, {"id": "ref-for-require-trusted-types-for-directive\u2463"}], "title": "4.3.1.1. require-trusted-types-for Pre-Navigation check"}], "external": false};
 window.dfnpanelData['trusted-types-sink-group'] = {"dfnID": "trusted-types-sink-group", "url": "#trusted-types-sink-group", "dfnText": "trusted-types-sink-group", "refSections": [{"refs": [{"id": "ref-for-trusted-types-sink-group"}], "title": "2.1. Injection sinks"}, {"refs": [{"id": "ref-for-trusted-types-sink-group\u2460"}], "title": "2.1.1. DOM XSS injection sinks"}, {"refs": [{"id": "ref-for-trusted-types-sink-group\u2461"}, {"id": "ref-for-trusted-types-sink-group\u2462"}], "title": "4.3.1. require-trusted-types-for directive"}, {"refs": [{"id": "ref-for-trusted-types-sink-group\u2463"}], "title": "4.3.3. Does sink type require trusted types?"}, {"refs": [{"id": "ref-for-trusted-types-sink-group\u2464"}], "title": "4.3.4. Should sink type mismatch violation be blocked by Content Security Policy?"}], "external": false};
 window.dfnpanelData['trusted-types-directive'] = {"dfnID": "trusted-types-directive", "url": "#trusted-types-directive", "dfnText": "trusted-types", "refSections": [{"refs": [{"id": "ref-for-trusted-types-directive"}], "title": "1.3. Use cases"}, {"refs": [{"id": "ref-for-trusted-types-directive\u2460"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-trusted-types-directive\u2461"}], "title": "4.3.2. trusted-types directive"}], "external": false};