Implement whole-value attr-tainting for custom properties
With the recent changes in attr spec, attr value tainting show work as
follows:
- attr() substitution value might have multiple tokens and all of them
should be tainted. - If parts of custom property is tainted, the whole custom property
becomes tainted. - For registered custom property with syntax, tainted values
should be IACVT.
This CL replaces tainted comment approach to address to cases above.
Bug: 370002411, 40320391
Change-Id: I59c24b6ebee24a1df082f54f6287058066e738a9
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6037885
Reviewed-by: Anders Hartvoll Ruud andruud@chromium.org
Commit-Queue: Munira Tursunova moonira@google.com
Cr-Commit-Position: refs/heads/main@{#1389723}