[Exposed=Window, SecureContext]
interface Sanitizer {
  [Pref="dom.security.sanitizer.enabled", Throws]
  constructor(optional SanitizerOptions options = {}); // optionality still discussed in spec
...
};```

The `Pref=` should be on the interface in the first line.

Comment on attachment 9183709 [details]
Bug 1673309 - Sanitizer should be behind a pref

Beta/Release Uplift Approval Request

• User impact if declined: The patch moves an experimental API behind a pref. Not taking this patch could cause a Web Compat issue, mostly for forthcoming releases, when feature testing based on 'Sanitizer' in window.
• Is this code covered by automated tests?: Yes
• Has the fix been verified in Nightly?: No
• Needs manual test from QE?: No
• If yes, steps to reproduce: Automated tests should cover this.
• List of other uplifts needed: None
• Risk to taking this patch: Low
• Why is the change risky/not risky? (and alternatives if risky): The API ought to be behind a pref, while still under development. Taking the patch makes stuff less risky.
• String changes made/needed: None

Backed out changeset d431052b6dec (Bug 1673309) for causing mochitest failures in test_interfaces_secureContext.html

Backout link: https://hg.mozilla.org/integration/autoland/rev/d260f821050b6e66da57981bc3e94d4537d6f807

Push with failures: https://treeherder.mozilla.org/#/jobs?repo=autoland&group_state=expanded&searchStr=mochitest%2Cplain&tochange=d260f821050b6e66da57981bc3e94d4537d6f807&fromchange=3c57cdfde03a63d2716267a70f439759f90abc02&selectedTaskRun=Sg6zpKyGRpuytxYVgDS66A.0

Failure log: https://treeherder.mozilla.org/logviewer.html#/jobs?job_id=319749058&repo=autoland&lineNumber=3144

https://hg.mozilla.org/mozilla-central/rev/6e98f4aae8d6

Might be a good idea to document this one.

Comment on attachment 9183709 [details]
Bug 1673309 - Sanitizer should be behind a pref

Approved for 83 beta 5, thanks.

https://hg.mozilla.org/releases/mozilla-beta/rev/88f235a5d1a7

Documentation added:

• https://developer.mozilla.org/en-US/docs/Web/API/HTML_Sanitizer_API
• https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Experimental_features#dom

Please let us know if you think this needs anythign else. Thanks!

Hi - I'm wondering if someone could clarify which version of FF this was available. From the thread here I understand Sanitizer was available in 82/83? But only behind the correct pref in 84?

Thank you!

Firefox 82 exposed the Sanitizer constructor, but the methods hanging off of the constructed object have never been exposed.
Firefox 83 (when in Nightly and Beta) were also affected of this issue, but this has been addressed before Firefox 83 was released.

The experimental (yet to be properly specified API) works as intended when setting the pref dom.security.sanitizer.enabled in any version after Firefox 82. Given that this is a prototype of an upcoming specification, we do not make any stability or functionality guarantees for it.

Thank you so much! Appreciated