Apply mXSS-safe SAFE_FOR_XML on untrusted re-inflation paths - #1334

Open

jeremy wants to merge 3 commits into

mainfrom

security/xss-campaign-safe-xml

Commits on Aug 30, 2026

Apply mXSS-safe SAFE_FOR_XML on untrusted re-inflation paths
jeremy
committed
5d4a6f6
Assert mXSS security invariant, not browser-dependent element shape
jeremy
committed
d60eb5f
Cover the re-inflation entry point with an editor.loadHTML security test
jeremy
committed
4292ffa