HostEnsureCanCompileStrings definition mismatch

[lukewarlow]

What is the issue with the HTML Standard?

The HTML definition of HostEnsureCanCompileString doesn't match the ECMAScript definition.

The call to EnsureCSPDoesNotBlockStringCompilation also doesn't match the CSP definition

[lukewarlow]

The CSP spec includes a link to tc39/ecma262#938 which explains the missing source in the hook. However, the current state only includes the parameter strings as a list with the body string, rather than the compiled source string which CSP currently requires.

However, if tc39/ecma262#3294 is accepted then the ECMA definition will change again and pass through the compiled string (along with certain other parameters that will be needed).

[annevk]

Duplicate of #4501 (see also #271)?

[lukewarlow]

Not quite a duplicate that issue is linked to a change to ecmascript that never happened. (I would personally close that other one out as it's going to be outdated compared to the latest state of TT)

[lukewarlow]

#271 while relevant doesn't include the EnsureCSPDoesNotBlockStringCompilation changes specifically (unless I'm mistaken)

[nicolo-ribaudo]

I was planning on updating the HTML spec after my changes that got merged in ecma262, but I ended up waiting given that that host hook's signature might change soon again.