Under the hood
Useful1 Signal1
The check for script-only artifact HTML now parses markup properly instead of string-matching.
What's wrong with this entry?
Anonymous. No account, no email.
What
The check for whether a piece of artifact HTML is nothing but <script> blocks now parses attributes and quoting properly instead of searching for a literal closing tag, and refuses input that mixes comments with script tags.
Details
- The media-type parser was switched to the same dedicated whitespace trimmer.
Evidence
<script>
Strings lifted out of the shipped bundle, so the claim above can be checked against them.