27 Nov
2024
27 Nov
'24
12:42 p.m.
On Wed Nov 27 12:39:24 2024 +0000, Jacek Caban wrote:
This is probably not a blocker, but note that exposing it like what will make `HTMLAreaElement.prototype.toString.call(document.createElement("a"))` work, while it should probably throw instead.
Actually, it's probably better to keep it like that here for now. We should be able to switch the validation to prototype id instead of iid at some point, which will take care of cases like that transparently.
(Although if we're going to have allow-list, it may be good to be explicit about this being only for `toString`.)