<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>287107</bug_id>
          
          <creation_ts>2025-02-05 11:14:22 -0800</creation_ts>
          <short_desc>Trusted Types runs extra code than neccessary when not used in CSP</short_desc>
          <delta_ts>2025-02-18 14:38:06 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>Other</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>266630</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Luke Warlow">lwarlow</reporter>
          <assigned_to name="Luke Warlow">lwarlow</assigned_to>
          <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2092227</commentid>
    <comment_count>0</comment_count>
    <who name="Luke Warlow">lwarlow</who>
    <bug_when>2025-02-05 11:14:22 -0800</bug_when>
    <thetext>Currently for sinks we check through the CSP policies each time the sink is hit. We can save this work by setting a flag on the document object (which we already have code to do for eval optimisations), and using that instead.

We can also skip some work for various attribute methods, by using the same flag.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2092231</commentid>
    <comment_count>1</comment_count>
    <who name="Luke Warlow">lwarlow</who>
    <bug_when>2025-02-05 11:20:42 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/40068</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2094196</commentid>
    <comment_count>2</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2025-02-12 11:15:39 -0800</bug_when>
    <thetext>&lt;rdar://problem/144714872&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2095610</commentid>
    <comment_count>3</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2025-02-18 14:38:04 -0800</bug_when>
    <thetext>Committed 290561@main (160b58921311): &lt;https://commits.webkit.org/290561@main&gt;

Reviewed commits have been landed. Closing PR #40068 and removing active labels.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>