Block Function constructor string arguments when trusted types enforced 
https://bugs.webkit.org/show_bug.cgi?id=273187
Summary Block Function constructor string arguments when trusted types enforced
Luke Warlow
Reported 2024-04-24 07:51:14 PDT
When trusted types are enforced string arguments to new Function() should be blocked unless the default policy exists and allows them.
Attachments
Add attachment proposed patch, testcase, etc.
Luke Warlow
Comment 1 2024-04-29 09:50:07 PDT
Pull request: https://github.com/WebKit/WebKit/pull/27878
Radar WebKit Bug Importer
Comment 2 2024-05-01 07:52:15 PDT
<rdar://problem/127361257>
Note You need to log in before you can comment on or make changes to this bug.