WPT
wpt / sanitizer-api / sethtml-safety.html
Spec: HTML Sanitizer API ↗
Runs: Chrome 155.0.8039.0 (wpt@6ec9fd59f, 2026-09-03) | Firefox 157.0a1 (wpt@6ec9fd59f, 2026-09-03) | Safari 251 preview (wpt@5ce815a83, 2026-08-27) | Ladybird 1.0-795e1 (wpt@7e3d005d7, 2026-09-03) | Servo Servo 0.6 (wpt@09159dcb3, 2026-09-02) | Blitz 188486089 (wpt@a95401e4e, 2026-09-02)
View on the Blitz WPT dashboard | Open test on wpt.live | wpt.fyi
| Chrome | Firefox | Safari | Ladybird | Servo | Blitz | |
|---|---|---|---|---|---|---|
| Total | 33/33 | 30/33 | 17/33 | 17/33 | 29/33 | NOT RUN |
| Subtest | Chrome | Firefox | Safari | Ladybird | Servo | Blitz |
|---|---|---|---|---|---|---|
| wrapper | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #0, setHTML("test"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #1, setHTML("<p>Hello</p>"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #2, setHTML("<div>Hello<script>World</script>xxx"). | PASS | FAIL | FAIL | FAIL | FAIL | — |
| Testcase #3, setHTML("<div>Hello<script>World</script>xxx"). | PASS | FAIL | FAIL | FAIL | FAIL | — |
| Testcase #4, setHTML("<svg>Hello<script>World</script>xxx"). | PASS | FAIL | FAIL | FAIL | FAIL | — |
| Testcase #5, setHTML("<a href="https://web-platform.test/" onclick="2+2" one="two">"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #6, setHTML("<a href="https://web-platform.test/" onclick="2+2" one="two">"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #7, setHTML("<img src="https://web-platform.test/test-image" onclick="2+2" one="two">"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #8, setHTML("<p data-x="1" data-y="2" data-z="3">"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #9, setHTML("<div><base href="https://example.org/"></base></div>"). | PASS | PASS | FAIL | FAIL | FAIL | — |
| Testcase #10, setHTML("<div><embed src="https://example.org/"></embed></div>"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #11, setHTML("<div><iframe src="https://example.org/"></iframe></div>"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #12, setHTML("<div><object data="https://example.org/"></object></div>"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #13, setHTML("<div><script src="https://example.org/"></script></div>"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #14, setHTML("<svg><script src="https://example.org/"></script></svg>"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #15, setHTML("<svg><use href="https://example.org/"></use></svg>"). | PASS | PASS | FAIL | FAIL | PASS | — |
| Testcase #0, setHTMLUnsafe("test"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #1, setHTMLUnsafe("<p>Hello</p>"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #2, setHTMLUnsafe("<div>Hello<script>World</script>xxx"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #3, setHTMLUnsafe("<div>Hello<script>World</script>xxx"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #4, setHTMLUnsafe("<svg>Hello<script>World</script>xxx"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #5, setHTMLUnsafe("<a href="https://web-platform.test/" onclick="2+2" one="two">"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #6, setHTMLUnsafe("<a href="https://web-platform.test/" onclick="2+2" one="two">"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #7, setHTMLUnsafe("<img src="https://web-platform.test/test-image" onclick="2+2" one="two">"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #8, setHTMLUnsafe("<p data-x="1" data-y="2" data-z="3">"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #9, setHTMLUnsafe("<div><base href="https://example.org/"></base></div>"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #10, setHTMLUnsafe("<div><embed src="https://example.org/"></embed></div>"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #11, setHTMLUnsafe("<div><iframe src="https://example.org/"></iframe></div>"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #12, setHTMLUnsafe("<div><object data="https://example.org/"></object></div>"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #13, setHTMLUnsafe("<div><script src="https://example.org/"></script></div>"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #14, setHTMLUnsafe("<svg><script src="https://example.org/"></script></svg>"). | PASS | PASS | PASS | PASS | PASS | — |
| Testcase #15, setHTMLUnsafe("<svg><use href="https://example.org/"></use></svg>"). | PASS | PASS | PASS | PASS | PASS | — |