tree 950706cfb493a42dfb44998133f5a7098782eac5
parent d11611524641c4ae3bfbdc549ded99f22578ef4a
author Daniel Vogelheim <vogelheim@chromium.org> 1626779918 -0700
committer Blink WPT Bot <blink-w3c-test-autoroller@chromium.org> 1626780634 -0700

[Sanitizer API] Untrusted content isn't parsed into the current doc.

Ensure that the untrusted HTML string is only parsed into an inert document,
rather than the current one. Otherwise, the untrusted content may be blindly
executed.

Bug: 1230602
Change-Id: I16272ca085f54d7bec8ff828473c44f728fc89fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3038566
Reviewed-by: Yifan Luo <lyf@chromium.org>
Commit-Queue: Daniel Vogelheim <vogelheim@chromium.org>
Cr-Commit-Position: refs/heads/master@{#903406}