@lwrjs/client-modules 0.23.5 → 0.23.7

package/build/modules/lwr/lockerDefine/lockerDefine.js

@@ -590,6 +590,7 @@ const {
   substring: StringProtoSubstring$LWS,
   toLowerCase: StringProtoToLowerCase$LWS,
   toUpperCase: StringProtoToUpperCase$LWS,
+  trim: StringProtoTrim$LWS,
   valueOf: StringProtoValueOf$LWS$1
 } = StringProto$LWS$1;
 const quoteCharRegExpRegistry$LWS = {
@@ -1510,7 +1511,7 @@ const {
 const PromiseResolve$LWS = PromiseCtor$LWS.resolve.bind(PromiseCtor$LWS);
 const PromiseReject$LWS = PromiseCtor$LWS.reject.bind(PromiseCtor$LWS);
 const trustedResources$LWS = toSafeSet$LWS(new SetCtor$LWS$1());
-/*! version: 0.28.1 */
+/*! version: 0.28.3 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -1553,6 +1554,8 @@ const {
   open: DocumentProtoOpen$LWS$1
 } = DocumentProto$LWS$1;
 const {
+  createAttribute: DocumentProtoCreateAttribute$LWS,
+  createAttributeNS: DocumentProtoCreateAttributeNS$LWS,
   createComment: DocumentProtoCreateComment$LWS,
   createDocumentFragment: DocumentProtoCreateDocumentFragment$LWS,
   createElement: DocumentProtoCreateElement$LWS$1,
@@ -1578,6 +1581,13 @@ const {
 // - noopener=1
 // - noopener=yes
 const noopenerRegExp$LWS = /(^|,)(\s*noopener\s*=\s*(?:yes|1)\s*)(,|$)/g;
+// Detects whether a (lowercased) features string contains any form of "noopener",
+// including bare "noopener", "noopener=yes", "noopener=1", etc.
+// Used by the window.open distortion to avoid double-injection.
+const noopenerPresentRegExp$LWS = /(^|,)\s*noopener\s*(=\s*[^,]*)?\s*(,|$)/;
+function isNoopenerPresent$LWS(lowercasedFeatures$LWS) {
+  return ReflectApply$LWS$1(RegExpProtoTest$LWS$1, noopenerPresentRegExp$LWS, [lowercasedFeatures$LWS]);
+}
 const rootWindow$LWS$1 = window;
 // These properties are part of the WindowOrGlobalScope mixin and not on
 // Window.prototype.
@@ -1910,6 +1920,16 @@ const HTMLElementGlobalAttributesToPropertyName$LWS = {
   inputmode: 'inputMode',
   tabindex: 'tabIndex'
 };
+const {
+  prototype: HTMLIFrameElementProto$LWS
+} = HTMLIFrameElement;
+// Used by '@locker/near-membrane-dom'.
+ObjectLookupOwnGetter$LWS$1(HTMLIFrameElementProto$LWS, 'contentWindow');
+const HTMLIFrameElementProtoSandboxGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLIFrameElementProto$LWS, 'sandbox');
+const HTMLIFrameElementProtoSandboxSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLIFrameElementProto$LWS, 'sandbox');
+const HTMLIFrameElementProtoSrcGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLIFrameElementProto$LWS, 'src');
+const HTMLIFrameElementProtoSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLIFrameElementProto$LWS, 'src');
+const HTMLIFrameElementProtoSrcdocGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLIFrameElementProto$LWS, 'srcdoc');
 const HTMLTemplateElementProtoContentGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLTemplateElement.prototype, 'content');
 const {
   prototype: NodeProto$LWS$1
@@ -1994,24 +2014,52 @@ class Validator$LWS {
       const normalizedInput$LWS = normalizeInput$LWS(input$LWS);
       return hasTag$LWS(normalizedInput$LWS, 'script') && ReflectApply$LWS$1(StringProtoIncludes$LWS, normalizedInput$LWS, ['xmlns']);
     };
-    // There is no reason to ever allow any HTML or XML that contains all three of these substrings.
+    // Detects the iframe+srcdoc substring combination in raw input.
+    // Any HTML or XML containing both <iframe> and the substring
+    // 'srcdoc' is considered hostile, regardless of where the
+    // substrings appear (markup, attribute value, script string
+    // literal, etc.). Sufficient by itself: scanners that rely on
+    // splitting an attacker-supplied iframe+srcdoc into separate
+    // tokens (e.g. via DOM-mutation tricks or string concatenation
+    // at runtime) cannot evade a pure substring check on the served
+    // body. Cheap (no DOM parse), safe to call on any iframe.src body
+    // in particular, where bodies routinely contain legitimate
+    // <script> elements but never need to embed a child iframe with
+    // srcdoc.
     // eslint-disable-next-line class-methods-use-this
+    this.isIframeSrcdocAttack = input$LWS => {
+      const normalizedInput$LWS = normalizeInput$LWS(input$LWS);
+      return hasTag$LWS(normalizedInput$LWS, 'iframe') && ReflectApply$LWS$1(StringProtoIncludes$LWS, normalizedInput$LWS, ['srcdoc']);
+    };
+    // Detects (a) the iframe+srcdoc substring combination, OR (b) a
+    // hidden <script> element — markup whose innerHTML contains a
+    // script tag while innerText does not, indicating the script was
+    // obfuscated to evade a sanitizer's text-level inspection.
+    // Suitable for HTML-handling APIs (innerHTML, setHTMLUnsafe,
+    // outerHTML, DOMParser, etc.) that should never accept any
+    // <script>-bearing input from sandboxed code.
+    //
+    // NOT suitable for iframe.src body inspection: existing test
+    // fixtures and component code rely on iframe.src loading same-
+    // origin pages that contain <script> elements (legacy contract
+    // we are stuck with — the iframe sandbox is the layer that
+    // contains their execution). The path-2 obfuscated-script check
+    // would reject those bodies and break the contract. For iframe.src
+    // body inspection use `isIframeSrcdocAttack` instead, which covers
+    // only the path-1 substring check.
     this.isIframeSrcdocScriptAttack = input$LWS => {
+      if (this.isIframeSrcdocAttack(input$LWS)) {
+        return true;
+      }
       const normalizedInput$LWS = normalizeInput$LWS(input$LWS);
-      const hasIframe$LWS = hasTag$LWS(normalizedInput$LWS, 'iframe') && ReflectApply$LWS$1(StringProtoIncludes$LWS, normalizedInput$LWS, ['srcdoc']);
       const hasScript$LWS = hasTag$LWS(normalizedInput$LWS, 'script');
-      // If neither an iframe or a script was detected, then this input is safe.
+      // If no script was detected, the input is safe.
       // istanbul ignore else: returns immediately
-      if (!hasIframe$LWS && !hasScript$LWS) {
+      if (!hasScript$LWS) {
         return false;
       }
-      // If the string contains both the words iframe and srcdoc, it is unsafe
-      // istanbul ignore else: returns immediately
-      if (hasIframe$LWS) {
-        return true;
-      }
       // This is obnoxious... jsdom doesn't implement HTMLElement.prototype.innerText
-      if (!HTMLElementProtoInnerTextGetter$LWS && hasScript$LWS) {
+      if (!HTMLElementProtoInnerTextGetter$LWS) {
         return true;
       }
       // If the input contained the word "script", then we need to confirm that the string
@@ -2039,6 +2087,64 @@ class Validator$LWS {
       return hasTag$LWS(innerHTML$LWS, 'script') && !hasTag$LWS(checkableInnerText$LWS, 'script');
     };
     this.isSharedElement = element$LWS => element$LWS === ReflectApply$LWS$1(DocumentProtoHeadGetter$LWS, this._document, []) || element$LWS === ReflectApply$LWS$1(DocumentProtoBodyGetter$LWS$1, this._document, []) || element$LWS === ReflectApply$LWS$1(DocumentProtoDocumentElementGetter$LWS, this._document, []);
+    // Detects whether `node` belongs to a document that an attacker
+    // could have populated with content bypassing LWS distortions.
+    // Used to gate cross-document node-movement APIs (Document.adoptNode,
+    // Document.importNode) against the W-22382462 chain shape.
+    //
+    // Returns true when the source document's browsing context is
+    // wrapped in an iframe loaded from a non-blank URL or carrying a
+    // `srcdoc` attribute. In those cases the document was loaded
+    // through the browser's native parser (HTML or XML); for XHTML
+    // resources, that includes DOCTYPE/ATTLIST processing that runs
+    // below the JS layer where no LWS distortion can intercept it.
+    //
+    // Returns false (benign) for:
+    //   - Same-document operations (`node.ownerDocument === currentDocument`).
+    //   - Detached documents (`defaultView === null`) — created via
+    //     `document.implementation.createHTMLDocument()` or
+    //     `DOMParser.parseFromString()`. These have no browsing context
+    //     and can only be populated via prototype-distorted APIs that
+    //     LWS already validates at insertion time.
+    //   - Documents hosted by the sandbox's own host window
+    //     (`defaultView === rootWindow`). LWS itself runs sandboxed
+    //     code inside a bootstrap iframe whose `src` is non-blank, so
+    //     the sandbox's view of `document` would otherwise be
+    //     unconditionally refused. The sandbox's own host iframe is
+    //     not user-controlled.
+    //   - Top-level documents (`defaultView.frameElement === null`).
+    //   - Iframe-hosted documents whose iframe has empty/about:blank
+    //     `src` AND empty `srcdoc` — never loaded a network resource.
+    // eslint-disable-next-line class-methods-use-this
+    this.isAttackerOwnedNode = (node$LWS, currentDocument$LWS) => {
+      const sourceDocument$LWS = ReflectApply$LWS$1(NodeProtoOwnerDocumentGetter$LWS, node$LWS, []);
+      if (sourceDocument$LWS === null || sourceDocument$LWS === currentDocument$LWS) {
+        return false;
+      }
+      const view$LWS = ReflectApply$LWS$1(DocumentProtoDefaultViewGetter$LWS, sourceDocument$LWS, []);
+      if (view$LWS === null || view$LWS === rootWindow$LWS$1) {
+        return false;
+      }
+      const frame$LWS = ReflectApply$LWS$1(WindowFrameElementGetter$LWS, view$LWS, []);
+      if (frame$LWS === null) {
+        return false;
+      }
+      if (frame$LWS instanceof HTMLIFrameElement) {
+        const src$LWS = ReflectApply$LWS$1(HTMLIFrameElementProtoSrcGetter$LWS, frame$LWS, []);
+        if (src$LWS !== '' && src$LWS !== 'about:blank') {
+          return true;
+        }
+        const srcdoc$LWS = ReflectApply$LWS$1(HTMLIFrameElementProtoSrcdocGetter$LWS, frame$LWS, []);
+        if (srcdoc$LWS) {
+          return true;
+        }
+        return false;
+      }
+      // Other frame-hosting elements (HTMLFrameElement, HTMLObjectElement)
+      // can carry network-loaded documents too. Conservative posture:
+      // refuse, since these are uncommon legitimate ownership chains.
+      return true;
+    };
     this._constructors = {
       HTMLLinkElement: HTMLLinkElement$LWS,
       HTMLScriptElement: HTMLScriptElement$LWS,
@@ -2124,10 +2230,13 @@ const {
 const {
   add: DOMTokenListProtoAdd$LWS,
   contains: DOMTokenListProtoContains$LWS,
-  remove: DOMTokenListProtoRemove$LWS
+  remove: DOMTokenListProtoRemove$LWS,
+  replace: DOMTokenListProtoReplace$LWS,
+  toggle: DOMTokenListProtoToggle$LWS
 } = DOMTokenListProto$LWS;
 const DOMTokenListProtoLengthGetter$LWS = ObjectLookupOwnGetter$LWS$1(DOMTokenListProto$LWS, 'length');
 const DOMTokenListProtoValueGetter$LWS = ObjectLookupOwnGetter$LWS$1(DOMTokenListProto$LWS, 'value');
+const DOMTokenListProtoValueSetter$LWS = ObjectLookupOwnSetter$LWS(DOMTokenListProto$LWS, 'value');
 const EventCtor$LWS = Event;
 const {
   prototype: EventProto$LWS
@@ -2136,6 +2245,7 @@ const {
   stopPropagation: EventProtoStopPropagation$LWS
 } = EventProto$LWS;
 const EventProtoCurrentTargetGetter$LWS = ObjectLookupOwnGetter$LWS$1(EventProto$LWS, 'currentTarget');
+const EventProtoTypeGetter$LWS = ObjectLookupOwnGetter$LWS$1(EventProto$LWS, 'type');
 const {
   addEventListener: EventTargetProtoAddEventListener$LWS,
   dispatchEvent: EventTargetProtoDispatchEvent$LWS,
@@ -2151,6 +2261,7 @@ const {
 } = ReflectGetOwnPropertyDescriptor$LWS(HTMLAnchorElementProto$LWS, 'href');
 const HTMLAnchorElementProtoPathnameGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLAnchorElementProto$LWS, 'pathname');
 const HTMLAnchorElementProtoProtocolGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLAnchorElementProto$LWS, 'protocol');
+const HTMLAnchorElementProtoProtocolSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLAnchorElementProto$LWS, 'protocol');
 const {
   prototype: HTMLButtonElementProto$LWS
 } = HTMLButtonElement;
@@ -2166,14 +2277,10 @@ const {
   set: HTMLFormElementProtoActionSetter$LWS
 } = ReflectGetOwnPropertyDescriptor$LWS(HTMLFormElementProto$LWS, 'action');
 const {
-  prototype: HTMLIFrameElementProto$LWS
-} = HTMLIFrameElement;
-// Used by '@locker/near-membrane-dom'.
-ObjectLookupOwnGetter$LWS$1(HTMLIFrameElementProto$LWS, 'contentWindow');
-const HTMLIFrameElementProtoSandboxGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLIFrameElementProto$LWS, 'sandbox');
-const HTMLIFrameElementProtoSandboxSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLIFrameElementProto$LWS, 'sandbox');
-const HTMLIFrameElementProtoSrcGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLIFrameElementProto$LWS, 'src');
-const HTMLIFrameElementProtoSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLIFrameElementProto$LWS, 'src');
+  prototype: HTMLImageElementProto$LWS
+} = HTMLImageElement;
+const HTMLImageElementProtoSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLImageElementProto$LWS, 'src');
+const HTMLImageElementProtoSrcsetSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLImageElementProto$LWS, 'srcset');
 const {
   prototype: HTMLInputElementProto$LWS
 } = HTMLInputElement;
@@ -2181,6 +2288,14 @@ const {
   get: HTMLInputElementProtoFormActionGetter$LWS,
   set: HTMLInputElementProtoFormActionSetter$LWS
 } = ReflectGetOwnPropertyDescriptor$LWS(HTMLInputElementProto$LWS, 'formAction');
+const {
+  prototype: HTMLLinkElementProto$LWS
+} = HTMLLinkElement;
+const HTMLLinkElementProtoHrefSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLLinkElementProto$LWS, 'href');
+const {
+  prototype: HTMLMediaElementProto$LWS
+} = HTMLMediaElement;
+const HTMLMediaElementProtoSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLMediaElementProto$LWS, 'src');
 const HTMLScriptElementCtor$LWS = HTMLScriptElement;
 const {
   prototype: HTMLScriptElementProto$LWS
@@ -2189,6 +2304,24 @@ const {
   get: HTMLScriptElementProtoSrcGetter$LWS,
   set: HTMLScriptElementProtoSrcSetter$LWS
 } = ReflectGetOwnPropertyDescriptor$LWS(HTMLScriptElementProto$LWS, 'src');
+const {
+  prototype: HTMLSourceElementProto$LWS
+} = HTMLSourceElement;
+const HTMLSourceElementProtoSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLSourceElementProto$LWS, 'src');
+const HTMLSourceElementProtoSrcsetSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLSourceElementProto$LWS, 'srcset');
+const {
+  prototype: HTMLTrackElementProto$LWS
+} = HTMLTrackElement;
+const HTMLTrackElementProtoSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLTrackElementProto$LWS, 'src');
+const MutationObserverCtor$LWS = MutationObserver;
+const {
+  prototype: MutationObserverProto$LWS
+} = MutationObserverCtor$LWS;
+const {
+  disconnect: MutationObserverProtoDisconnect$LWS,
+  observe: MutationObserverProtoObserve$LWS,
+  takeRecords: MutationObserverProtoTakeRecords$LWS
+} = MutationObserverProto$LWS;
 const NAMESPACE_DEFAULT$LWS = 'default';
 const NAMESPACE_SVG$LWS = 'http://www.w3.org/2000/svg';
 const NAMESPACE_XHTML$LWS = 'http://www.w3.org/1999/xhtml';
@@ -2382,7 +2515,7 @@ const {
 const XhrProtoResponseTextGetter$LWS = ObjectLookupOwnGetter$LWS$1(XhrProto$LWS, 'responseText');
 const XhrProtoStatusGetter$LWS = ObjectLookupOwnGetter$LWS$1(XhrProto$LWS, 'status');
 ObjectLookupOwnSetter$LWS(XhrProto$LWS, 'withCredentials');
-/*! version: 0.28.1 */
+/*! version: 0.28.3 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -2410,7 +2543,21 @@ const DISALLOWED_ENDPOINTS_LIST$LWS = ['/aura', '/webruntime'];
 const DISALLOWED_BROWSING_CONTEXT_ENDPOINTS_LIST$LWS = ['/chatter'];
 const TRUSTED_DOMAINS_REG_EXP$LWS = /\.(force|salesforce|visualforce|documentforce|my\.site|salesforce-sites)\.com$/;
 const URL_SCHEMES_LIST$LWS = toSafeArray$LWS$1(['about:', 'http:', 'https:']);
-const newlinesAndTabsRegExp$LWS = /[\u2028\u2029\n\r\t]/g;
+// Characters that browsers strip or ignore when resolving a URL, but that defeat
+// LWS's string-based scheme/endpoint checks if left in place. A leading invisible
+// character (e.g. U+200B before "javascript:") makes the URL parser treat the input
+// as authority-relative, leaving the scheme empty so the allowlist check is fooled;
+// an embedded one (e.g. "/se\u200btup") slips past endpoint denylist matching.
+// Stripping them before parsing closes both for every URL-bearing distortion at once.
+//
+// \p{Cc} - control characters (covers \t \n \r and the NULL byte)
+// \p{Cf} - format characters (zero-width space/joiners, soft hyphen, BOM, bidi marks
+//          U+200E/U+200F/U+202A-U+202E, word joiner, etc.)
+// \u034f  - combining grapheme joiner (category Mn, not Cc/Cf, but perceptually
+//          invisible and ignored by the URL parser, so listed explicitly)
+// \u2028  - line separator (category Zl, not covered by Cc)
+// \u2029  - paragraph separator (category Zp, not covered by Cc)
+const strippableURLCharsRegExp$LWS = /[\0-\x1F\x7F-\x9F\xAD\u034F\u0600-\u0605\u061C\u06DD\u070F\u0890\u0891\u08E2\u180E\u200B-\u200F\u2028-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB\u{110BD}\u{110CD}\u{13430}-\u{1343F}\u{1BCA0}-\u{1BCA3}\u{1D173}-\u{1D17A}\u{E0001}\u{E0020}-\u{E007F}]/gu;
 const normalizerAnchor$LWS = ReflectApply$LWS$1(DocumentProtoCreateElement$LWS$1, rootDocument$LWS, ['a']);
 function isSameOriginURL$LWS(resourceValue$LWS) {
   let validParsedURL$LWS;
@@ -2434,13 +2581,18 @@ function isAttemptingToExploitURL$LWS(resourceValue$LWS) {
   const locationHref$LWS = rootWindow$LWS$1.location.href;
   return loweredResourceValue$LWS === '/' || loweredResourceValue$LWS[0] === '#' || loweredResourceValue$LWS[0] === '?' || ReflectApply$LWS$1(StringProtoStartsWith$LWS, loweredResourceValue$LWS, [`${locationHref$LWS}#`]) || ReflectApply$LWS$1(StringProtoStartsWith$LWS, loweredResourceValue$LWS, [`${locationHref$LWS}?`]);
 }
-// Validates that a URL doesn't target disallowed endpoints
+// Validates that a URL doesn't target disallowed endpoints.
 // @TODO: W-7302311 Make paths and domains configurable.
 function isAllowedEndpointURL$LWS(parsedURL$LWS) {
   const loweredPathname$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, parsedURL$LWS.pathname, []);
   // This MUST be done inside the function because the gate may not be enabled when the
   // module code is loaded and evaluated (as would be the case for test environments)
   if (isGaterEnabledFeature$LWS('changesSince.262')) {
+    // Cross-origin URLs bypass the denylist — they cannot carry the user's session
+    // credentials to this instance's platform-internal endpoints (W-23009170).
+    if (!isSameOriginURL$LWS(parsedURL$LWS.normalizedURL)) {
+      return true;
+    }
     DISALLOWED_ENDPOINTS_LIST$LWS.push('/_nc_external', '/force', '/setup');
   }
   for (let i$LWS = 0, {
@@ -2491,9 +2643,47 @@ function sanitizeURLForElement$LWS(url$LWS) {
   return resolveURL$LWS(sanitizeURLString$LWS(url$LWS));
 }
 function sanitizeURLString$LWS(urlString$LWS) {
-  return urlString$LWS === '' ? urlString$LWS : ReflectApply$LWS$1(StringProtoReplace$LWS, urlString$LWS, [newlinesAndTabsRegExp$LWS, '']);
+  return urlString$LWS === '' ? urlString$LWS : ReflectApply$LWS$1(StringProtoReplace$LWS, urlString$LWS, [strippableURLCharsRegExp$LWS, '']);
+}
+// Per the HTML spec, srcset candidates are comma-delimited. A candidate is a
+// URL optionally followed by whitespace and a width/density descriptor like
+// "480w" or "2x". URLs are unlikely to contain commas (they would have to be
+// percent-encoded to be spec-valid), so a simple comma split is sufficient
+// for LWS's validation needs — the browser will do its own spec-compliant
+// parse when it actually dispatches requests. We just need to ensure every
+// candidate URL clears isAllowedEndpointURL() before the browser sees it.
+const srcsetLeadingWhitespaceRegExp$LWS = /^[\s,]+/;
+const srcsetTrailingWhitespaceRegExp$LWS = /[\s,]+$/;
+const srcsetCandidateSplitRegExp$LWS = /\s*,\s*/;
+const srcsetWhitespaceSplitRegExp$LWS = /\s+/;
+function sanitizeSrcsetAndValidateEndpoints$LWS(rawSrcset$LWS) {
+  const sanitized$LWS = sanitizeURLString$LWS(rawSrcset$LWS);
+  const trimmed$LWS = ReflectApply$LWS$1(StringProtoReplace$LWS, sanitized$LWS, [srcsetLeadingWhitespaceRegExp$LWS, '']);
+  const normalized$LWS = ReflectApply$LWS$1(StringProtoReplace$LWS, trimmed$LWS, [srcsetTrailingWhitespaceRegExp$LWS, '']);
+  if (normalized$LWS === '') {
+    return sanitized$LWS;
+  }
+  const candidates$LWS = ReflectApply$LWS$1(StringProtoSplit$LWS, normalized$LWS, [srcsetCandidateSplitRegExp$LWS]);
+  for (let i$LWS = 0, {
+      length: length$LWS
+    } = candidates$LWS; i$LWS < length$LWS; i$LWS += 1) {
+    const candidate$LWS = candidates$LWS[i$LWS];
+    if (candidate$LWS === '') {
+      continue;
+    }
+    const parts$LWS = ReflectApply$LWS$1(StringProtoSplit$LWS, candidate$LWS, [srcsetWhitespaceSplitRegExp$LWS]);
+    const url$LWS = parts$LWS[0];
+    if (!url$LWS) {
+      continue;
+    }
+    const parsedURL$LWS = parseURL$LWS(url$LWS);
+    if (!isAllowedEndpointURL$LWS(parsedURL$LWS)) {
+      throw new LockerSecurityError$LWS(`Cannot request disallowed endpoint: ${toSafeTemplateStringValue$LWS(parsedURL$LWS.normalizedURL)}`);
+    }
+  }
+  return sanitized$LWS;
 }
-/*! version: 0.28.1 */
+/*! version: 0.28.3 */
 
 /*! @license DOMPurify 3.2.4 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.2.4/LICENSE */
 
@@ -3905,7 +4095,7 @@ try {
   // swallow
 }
 const trusted = createPolicy('trusted', policyOptions);
-/*! version: 0.28.1 */
+/*! version: 0.28.3 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -3973,11 +4163,17 @@ ReflectApply$LWS$1(DocumentProtoCreateElement$LWS$1, document, ['template']);
 const queue$LWS = toSafeSet$LWS(new SetCtor$LWS$1());
 // A regexp to find all non lowercase alphanumeric.
 const urlReplacerRegExp$LWS = /[^a-z0-9]+/gi;
-function createSantizerHooksRegistry$LWS(sandboxKey$LWS) {
+function createSantizerHooksRegistry$LWS(sandboxKey$LWS, dompurifyInstance$LWS) {
   return {
     __proto__: null,
-    // uponSanitizeAttribute is generic, so its definition can be a reused function
-    uponSanitizeAttribute: uponSanitizeAttribute$LWS,
+    // uponSanitizeAttribute closes over the DOMPurify instance so it can
+    // ask `isValidAttribute` whether the un-suffixed base of a Lit
+    // placeholder (e.g. `src$lit$` → `src`) would have been admitted by
+    // DOMPurify's own allowlist. That makes the `$lit$` bypass strictly
+    // narrower than DOMPurify's primary allowlist: anything the allowlist
+    // would reject, the bypass also rejects — preserving the positive-list
+    // invariant even for attributes the suffix would otherwise smuggle in.
+    uponSanitizeAttribute: createUponSanitizeAttribute$LWS(dompurifyInstance$LWS),
     // uponSanitizeElement is sandbox-key-specific
     uponSanitizeElement(node$LWS, data$LWS, config$LWS) {
       var _config$CUSTOM_ELEMEN$LWS;
@@ -4022,7 +4218,7 @@ function getSanitizerForConfig$LWS(sandboxKey$LWS, configName$LWS) {
     const config$LWS = CONFIG$LWS[configName$LWS];
     configuredDOMPurifyInstance$LWS = purify();
     configuredDOMPurifyInstance$LWS.setConfig(config$LWS);
-    const hooksRegistry$LWS = createSantizerHooksRegistry$LWS(sandboxKey$LWS);
+    const hooksRegistry$LWS = createSantizerHooksRegistry$LWS(sandboxKey$LWS, configuredDOMPurifyInstance$LWS);
     for (const hookName$LWS in hooksRegistry$LWS) {
       if (hookName$LWS === 'uponSanitizeElement') {
         configuredDOMPurifyInstance$LWS.addHook('uponSanitizeElement', hooksRegistry$LWS[hookName$LWS]);
@@ -4145,36 +4341,62 @@ function parseHref$LWS(url$LWS) {
     requestedURL: requestedURL$LWS
   };
 }
-// Sanitize a URL representing a SVG href attribute value.
-function uponSanitizeAttribute$LWS(node$LWS, data$LWS, _config$LWS) {
-  const {
-    attrValue: attrValue$LWS,
-    attrName: attrName$LWS
-  } = data$LWS;
-  const nodeName$LWS = ReflectApply$LWS$1(StringProtoToUpperCase$LWS, getNodeName$LWS(node$LWS), []);
-  if (attrValue$LWS && nodeName$LWS === 'USE' && SANITIZE_USE_ELEMENT_ATTRIBUTES_LIST$LWS.includes(attrName$LWS)) {
-    data$LWS.attrValue = sanitizeSvgHref$LWS(attrValue$LWS);
-  }
-  // Remove action/formaction attributes pointing to disallowed endpoints.
-  // Using keepAttr=false rather than blanking the value so that formaction
-  // removal falls back to the form's own (already validated) action attribute
-  // instead of overriding it with the current page URL.
-  if (isGaterEnabledFeature$LWS('changesSince.262') && attrValue$LWS && (attrName$LWS === 'action' || attrName$LWS === 'formaction') && (nodeName$LWS === 'FORM' || nodeName$LWS === 'BUTTON' || nodeName$LWS === 'INPUT')) {
-    const parsedURL$LWS = parseURL$LWS(attrValue$LWS);
-    if (!isAllowedEndpointURL$LWS(parsedURL$LWS)) {
-      data$LWS.keepAttr = false;
+// Length of Lit's attribute-name placeholder suffix ("$lit$").
+const LIT_ATTR_SUFFIX_LENGTH$LWS = 5;
+// Factory: returns a DOMPurify `uponSanitizeAttribute` hook bound to the
+// given sanitizer instance. Binding to the instance is how the `$lit$`
+// bypass below asks DOMPurify's own `isValidAttribute` whether the
+// un-suffixed base name would have been accepted by the configured
+// allowlist (ARIA_ATTR / DATA_ATTR regex or ALLOWED_ATTR \ FORBID_ATTR).
+// That check keeps the bypass strictly narrower than DOMPurify's primary
+// allowlist, so we don't smuggle through names like `onerror`, `style`,
+// `srcdoc`, or any future sink DOMPurify rejects by default.
+function createUponSanitizeAttribute$LWS(dompurifyInstance$LWS) {
+  return function uponSanitizeAttribute$LWS(node$LWS, data$LWS, _config$LWS) {
+    const {
+      attrValue: attrValue$LWS,
+      attrName: attrName$LWS
+    } = data$LWS;
+    const nodeName$LWS = ReflectApply$LWS$1(StringProtoToUpperCase$LWS, getNodeName$LWS(node$LWS), []);
+    if (attrValue$LWS && nodeName$LWS === 'USE' && SANITIZE_USE_ELEMENT_ATTRIBUTES_LIST$LWS.includes(attrName$LWS)) {
+      data$LWS.attrValue = sanitizeSvgHref$LWS(attrValue$LWS);
+    }
+    // Remove action/formaction attributes pointing to disallowed endpoints.
+    // Using keepAttr=false rather than blanking the value so that formaction
+    // removal falls back to the form's own (already validated) action attribute
+    // instead of overriding it with the current page URL.
+    if (isGaterEnabledFeature$LWS('changesSince.262') && attrValue$LWS && (attrName$LWS === 'action' || attrName$LWS === 'formaction') && (nodeName$LWS === 'FORM' || nodeName$LWS === 'BUTTON' || nodeName$LWS === 'INPUT')) {
+      const parsedURL$LWS = parseURL$LWS(attrValue$LWS);
+      if (!isAllowedEndpointURL$LWS(parsedURL$LWS)) {
+        data$LWS.keepAttr = false;
+      }
     }
-  }
-  // To support Lit, we must tell DOMPurify that attributes starting with "@", ".", or "?" are allowed.
-  // Ref:
-  // https://lit.dev/docs/components/events/
-  // https://lit.dev/docs/templates/expressions/#property-expressions
-  // https://lit.dev/docs/templates/expressions/#boolean-attribute-expressions
-  // istanbul ignore next: this is tested under all normal CI runs, but is not included in coverage
-  if (attrName$LWS && (ReflectApply$LWS$1(StringProtoStartsWith$LWS, attrName$LWS, ['@']) || ReflectApply$LWS$1(StringProtoStartsWith$LWS, attrName$LWS, ['.']) || ReflectApply$LWS$1(StringProtoStartsWith$LWS, attrName$LWS, ['?']))) {
-    data$LWS.forceKeepAttr = true;
-  }
-  return data$LWS;
+    // To support Lit, we must tell DOMPurify that attributes starting with "@", ".", or "?" are allowed.
+    // Ref:
+    // https://lit.dev/docs/components/events/
+    // https://lit.dev/docs/templates/expressions/#property-expressions
+    // https://lit.dev/docs/templates/expressions/#boolean-attribute-expressions
+    //
+    // Lit also rewrites plain attribute bindings (e.g. `src="${…}"`) by appending
+    // its marker suffix "$lit$" to the attribute name during HTML generation. The
+    // suffixed attribute is only a placeholder that Lit removes immediately after
+    // registering its AttributePart; the real value is later committed through
+    // Element.prototype.setAttribute, which remains subject to the per-element
+    // attribute distortion registry.
+    //
+    // We only force-keep the suffixed placeholder when the un-suffixed base
+    // name would *also* pass DOMPurify's allowlist. Without that second
+    // check, the bypass would admit any attribute ending in `$lit$` —
+    // including `onerror$lit$`, `style$lit$`, `srcdoc$lit$` — and Lit would
+    // then strip the suffix and commit the real value via setAttribute,
+    // with no `on*` / style / srcdoc distortion to catch it. Delegating to
+    // DOMPurify.isValidAttribute keeps the positive-list invariant.
+    // istanbul ignore next: this is tested under all normal CI runs, but is not included in coverage
+    if (attrName$LWS && (ReflectApply$LWS$1(StringProtoStartsWith$LWS, attrName$LWS, ['@']) || ReflectApply$LWS$1(StringProtoStartsWith$LWS, attrName$LWS, ['.']) || ReflectApply$LWS$1(StringProtoStartsWith$LWS, attrName$LWS, ['?']) || isGaterEnabledFeature$LWS('changesSince.264') && ReflectApply$LWS$1(StringProtoEndsWith$LWS, attrName$LWS, ['$lit$']) && dompurifyInstance$LWS.isValidAttribute(nodeName$LWS, ReflectApply$LWS$1(StringProtoSlice$LWS$1, attrName$LWS, [0, attrName$LWS.length - LIT_ATTR_SUFFIX_LENGTH$LWS]), attrValue$LWS))) {
+      data$LWS.forceKeepAttr = true;
+    }
+    return data$LWS;
+  };
 }
 function blobSanitizer$LWS(sandboxKey$LWS) {
   if (typeof sandboxKey$LWS !== 'string') {
@@ -4182,7 +4404,7 @@ function blobSanitizer$LWS(sandboxKey$LWS) {
   }
   return getSanitizerForConfig$LWS(sandboxKey$LWS, 'STRING_BLOB_HTML');
 }
-/*! version: 0.28.1 */
+/*! version: 0.28.3 */
 
 /*!
  * Copyright (C) 2023 salesforce.com, inc.
@@ -4391,7 +4613,7 @@ function createScriptSrcURLSetter$LWS(targetElement$LWS) {
     ReflectApply$LWS$1(ElementProtoSetAttributeNS$LWS, targetElement$LWS, [attributeNamespaceURI$LWS, attributeName$LWS, src$LWS]);
   };
 }
-/*! version: 0.28.1 */
+/*! version: 0.28.3 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -5137,31 +5359,9 @@ function setCustomElementsRegistry$LWS(document$LWS, key$LWS) {
   currentRegistry$LWS = getSandboxCustomElementRegistry$LWS(document$LWS, key$LWS);
 }
 const DataTransferProtoBlockedProperties$LWS = ['mozCursor', 'mozSourceNode', 'mozUserCancelled'];
-
-/**
- * Blocks read access to the 'nonce' attribute.
- *
- * The 'nonce' attribute contains a cryptographic token used by Content Security Policy
- * to allow specific inline scripts/styles to execute. If malicious code can read this
- * value, it can bypass CSP by injecting scripts with the stolen nonce.
- *
- * This function is intentionally separate from the general attribute distortion registry
- * (registerAttributeDistortion/getAttributeDistortion) because that registry is designed
- * for setter distortions that validate/sanitize values being set. Most blocked attributes
- * (like 'srcdoc' on iframes) only need to block writes while allowing reads. The 'nonce'
- * attribute is unique in that it must block both reads AND writes.
- *
- * By using a dedicated function, we avoid incorrectly applying setter distortions when
- * reading attributes, which would cause errors for attributes like 'src' and 'href'.
- */
-function blockAccessToNonce$LWS(attrName$LWS) {
-  if (attrName$LWS === 'nonce') {
-    throw new LockerSecurityError$LWS("Attribute 'nonce' not accessible");
-  }
-}
 const attributeDistortionFactoriesCache$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1());
 const sandboxAttributeDistortionRegistryCache$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
-function finalizeAttributeDistortions$LWS(record$LWS) {
+function finalizeAttributeSetterDistortions$LWS(record$LWS) {
   const attributeFactories$LWS = attributeDistortionFactoriesCache$LWS.get(record$LWS);
   // istanbul ignore if: currently unreachable via tests
   if (attributeFactories$LWS === undefined) {
@@ -5221,7 +5421,7 @@ function lookupAttributeDistortion$LWS(document$LWS, key$LWS, element$LWS, attrN
   }
   return undefined;
 }
-function getAttributeDistortion$LWS(record$LWS, element$LWS, attrName$LWS, attributeNamespace$LWS = NAMESPACE_DEFAULT$LWS) {
+function getAttributeSetterDistortion$LWS(record$LWS, element$LWS, attrName$LWS, attributeNamespace$LWS = NAMESPACE_DEFAULT$LWS) {
   const {
     document: document$LWS,
     key: key$LWS
@@ -5236,6 +5436,11 @@ function getAttributeDistortion$LWS(record$LWS, element$LWS, attrName$LWS, attri
   // to the function's realm, not the element's. Fall back to the element's
   // ownerDocument registry where constructors match the element's prototype
   // chain.
+  //
+  // Gated changesSince.262 because the cross-realm fallback was introduced
+  // in the 262 train alongside the other cross-realm hardening; lowering
+  // the gate here would re-expose 262 sandboxes to the cross-realm
+  // bypass class this fallback closes.
   if (isGaterEnabledFeature$LWS('changesSince.262')) {
     const elementDocument$LWS = ReflectApply$LWS$1(NodeProtoOwnerDocumentGetter$LWS, element$LWS, []);
     if (elementDocument$LWS && elementDocument$LWS !== document$LWS) {
@@ -5250,7 +5455,7 @@ function getAttributeDistortion$LWS(record$LWS, element$LWS, attrName$LWS, attri
 function normalizeNamespace$LWS(ns$LWS) {
   return ns$LWS === null || ns$LWS === undefined || ns$LWS === '' ? NAMESPACE_DEFAULT$LWS : ns$LWS;
 }
-function registerAttributeDistortion$LWS(record$LWS, ElementCtor$LWS, attributeName$LWS, attributeNamespace$LWS, distortion$LWS) {
+function registerAttributeSetterDistortion$LWS(record$LWS, ElementCtor$LWS, attributeName$LWS, attributeNamespace$LWS, distortion$LWS) {
   let attributeFactories$LWS = attributeDistortionFactoriesCache$LWS.get(record$LWS);
   if (attributeFactories$LWS === undefined) {
     attributeFactories$LWS = [];
@@ -5273,6 +5478,137 @@ function registerAttributeDistortion$LWS(record$LWS, ElementCtor$LWS, attributeN
     elementCtorMap$LWS.set(ElementCtor$LWS, distortion$LWS);
   };
 }
+const attributeGetterFactoriesCache$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1());
+const sandboxAttributeGetterRegistryCache$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
+function finalizeAttributeGetterDistortions$LWS(record$LWS) {
+  const factories$LWS = attributeGetterFactoriesCache$LWS.get(record$LWS);
+  if (factories$LWS === undefined) {
+    return;
+  }
+  attributeGetterFactoriesCache$LWS.delete(record$LWS);
+  const {
+    document: document$LWS,
+    key: key$LWS
+  } = record$LWS;
+  let sandboxRegistry$LWS = sandboxAttributeGetterRegistryCache$LWS.get(document$LWS);
+  if (sandboxRegistry$LWS === undefined) {
+    sandboxRegistry$LWS = {
+      __proto__: null
+    };
+    sandboxAttributeGetterRegistryCache$LWS.set(document$LWS, sandboxRegistry$LWS);
+  }
+  const registry$LWS = {
+    __proto__: null
+  };
+  sandboxRegistry$LWS[key$LWS] = registry$LWS;
+  for (let i$LWS = 0, {
+      length: length$LWS
+    } = factories$LWS; i$LWS < length$LWS; i$LWS += 1) {
+    factories$LWS[i$LWS](registry$LWS);
+  }
+}
+function lookupAttributeGetterIn$LWS(document$LWS, key$LWS, element$LWS, attrName$LWS, attributeNamespace$LWS) {
+  const sandboxRegistry$LWS = sandboxAttributeGetterRegistryCache$LWS.get(document$LWS);
+  if (sandboxRegistry$LWS === undefined) {
+    return undefined;
+  }
+  const registry$LWS = sandboxRegistry$LWS[key$LWS];
+  if (registry$LWS === undefined) {
+    return undefined;
+  }
+  const byNamespace$LWS = registry$LWS[ReflectApply$LWS$1(StringProtoToLowerCase$LWS, attrName$LWS, [])];
+  if (byNamespace$LWS === undefined) {
+    return undefined;
+  }
+  const ctorMap$LWS = byNamespace$LWS[attributeNamespace$LWS];
+  if (ctorMap$LWS === undefined) {
+    return undefined;
+  }
+  const it$LWS = ctorMap$LWS.entries();
+  for (const {
+    0: Ctor$LWS,
+    1: getter$LWS
+  } of it$LWS) {
+    if (element$LWS instanceof Ctor$LWS) {
+      return getter$LWS;
+    }
+  }
+  return undefined;
+}
+function getAttributeGetterDistortion$LWS(record$LWS, element$LWS, attrName$LWS, attributeNamespace$LWS = NAMESPACE_DEFAULT$LWS) {
+  // Callers pass the already-TOCTOU-coerced string; normalize here so every
+  // read path looks up against a consistent (lowercased, namespace-stripped)
+  // attribute-name key without each caller re-running the same transform.
+  const normalizedName$LWS = normalizeNamespacedAttributeName$LWS(attrName$LWS);
+  const {
+    document: document$LWS,
+    key: key$LWS
+  } = record$LWS;
+  const direct$LWS = lookupAttributeGetterIn$LWS(document$LWS, key$LWS, element$LWS, normalizedName$LWS, attributeNamespace$LWS);
+  if (direct$LWS !== undefined) {
+    return direct$LWS;
+  }
+  // Cross-realm fallback: same shape as the setter registry's, gated 262
+  // for the same reason. Nonce protection on the getter side relies on
+  // this fallback firing for cross-realm reads at 262 sandboxes;
+  // raising this gate would re-leak nonce through cross-realm Element
+  // instances on that gate.
+  if (isGaterEnabledFeature$LWS('changesSince.262')) {
+    const elementDocument$LWS = ReflectApply$LWS$1(NodeProtoOwnerDocumentGetter$LWS, element$LWS, []);
+    if (elementDocument$LWS && elementDocument$LWS !== document$LWS) {
+      return lookupAttributeGetterIn$LWS(elementDocument$LWS, key$LWS, element$LWS, normalizedName$LWS, attributeNamespace$LWS);
+    }
+  }
+  return undefined;
+}
+function registerAttributeGetterDistortion$LWS(record$LWS, ElementCtor$LWS, attributeName$LWS, attributeNamespace$LWS, getter$LWS) {
+  let factories$LWS = attributeGetterFactoriesCache$LWS.get(record$LWS);
+  if (factories$LWS === undefined) {
+    factories$LWS = [];
+    attributeGetterFactoriesCache$LWS.set(record$LWS, factories$LWS);
+  }
+  const loweredAttributeName$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, attributeName$LWS, []);
+  factories$LWS[factories$LWS.length] = registry$LWS => {
+    let byNamespace$LWS = registry$LWS[loweredAttributeName$LWS];
+    if (byNamespace$LWS === undefined) {
+      byNamespace$LWS = {
+        __proto__: null
+      };
+      registry$LWS[loweredAttributeName$LWS] = byNamespace$LWS;
+    }
+    let ctorMap$LWS = byNamespace$LWS[attributeNamespace$LWS];
+    if (ctorMap$LWS === undefined) {
+      ctorMap$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1());
+      byNamespace$LWS[attributeNamespace$LWS] = ctorMap$LWS;
+    }
+    ctorMap$LWS.set(ElementCtor$LWS, getter$LWS);
+  };
+}
+function initDistortionAttrValueGetter$LWS({
+  globalObject: {
+    Attr: Attr$LWS
+  }
+}) {
+  const originalAttrValueGetter$LWS = ObjectLookupOwnGetter$LWS$1(Attr$LWS.prototype, 'value');
+  return function distortionAttrValueGetter$LWS(record$LWS) {
+    return [originalAttrValueGetter$LWS, function value$LWS() {
+      if (isGaterEnabledFeature$LWS('changesSince.264')) {
+        const ownerElement$LWS = ReflectApply$LWS$1(AttrProtoOwnerElementGetter$LWS, this, []);
+        if (ownerElement$LWS) {
+          const attrName$LWS = ReflectApply$LWS$1(AttrProtoNameGetter$LWS, this, []);
+          const attrNamespace$LWS = ReflectApply$LWS$1(AttrProtoNamespaceURIGetter$LWS, this, []);
+          const normalizedNamespace$LWS = normalizeNamespace$LWS(attrNamespace$LWS);
+          const override$LWS = getAttributeGetterDistortion$LWS(record$LWS, ownerElement$LWS, attrName$LWS, normalizedNamespace$LWS);
+          if (override$LWS !== undefined) {
+            const result$LWS = ReflectApply$LWS$1(override$LWS, ownerElement$LWS, []);
+            return result$LWS === null ? '' : result$LWS;
+          }
+        }
+      }
+      return ReflectApply$LWS$1(originalAttrValueGetter$LWS, this, []);
+    }];
+  };
+}
 function initDistortionAttrValueSetter$LWS({
   globalObject: {
     Attr: Attr$LWS
@@ -5287,7 +5623,7 @@ function initDistortionAttrValueSetter$LWS({
         const attrName$LWS = ReflectApply$LWS$1(AttrProtoNameGetter$LWS, this, []);
         const attrNamespace$LWS = ReflectApply$LWS$1(AttrProtoNamespaceURIGetter$LWS, this, []);
         const normalizedNamespace$LWS = normalizeNamespace$LWS(attrNamespace$LWS);
-        const distortion$LWS = getAttributeDistortion$LWS(record$LWS, ownerElement$LWS, attrName$LWS, normalizedNamespace$LWS);
+        const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, ownerElement$LWS, attrName$LWS, normalizedNamespace$LWS);
         // istanbul ignore if: coverage missing, needs investigation
         if (distortion$LWS) {
           ReflectApply$LWS$1(distortion$LWS, ownerElement$LWS, [val$LWS]);
@@ -5328,6 +5664,65 @@ function initDistortionAuraUtilGlobalEval$LWS({
     }];
   };
 }
+function initDistortionBroadcastChannelCtor$LWS({
+  globalObject: {
+    BroadcastChannel: originalBroadcastChannelCtor$LWS
+  }
+}) {
+  // istanbul ignore if: this is a safety precaution, but currently unreachable via tests
+  if (typeof originalBroadcastChannelCtor$LWS !== 'function') {
+    return noop$LWS$1;
+  }
+  return function distortionBroadcastChannelCtor$LWS({
+    key: key$LWS
+  }) {
+    return [originalBroadcastChannelCtor$LWS, function BroadcastChannel$LWS(...args$LWS) {
+      // Namespace-prefix the channel name with the sandbox key so
+      // that channels created in different sandboxes bind to
+      // distinct native channel names, even when the caller
+      // supplies the same visible name. Mirrors the approach used
+      // for `localStorage` / `sessionStorage` / `CacheStorage` /
+      // cookies.
+      if (isGaterEnabledFeature$LWS('changesSince.264') && args$LWS.length) {
+        args$LWS[0] = prependNamespaceMarker$LWS(toSafeStringValue$LWS(args$LWS[0]), key$LWS);
+      }
+      return ReflectConstruct$LWS(originalBroadcastChannelCtor$LWS, args$LWS);
+    }];
+  };
+}
+function initDistortionBroadcastChannelNameGetter$LWS({
+  globalObject: {
+    BroadcastChannel: originalBroadcastChannelCtor$LWS
+  }
+}) {
+  // istanbul ignore if: this is a safety precaution, but currently unreachable via tests
+  if (typeof originalBroadcastChannelCtor$LWS !== 'function') {
+    return noop$LWS$1;
+  }
+  const originalNameGetter$LWS = ObjectLookupOwnGetter$LWS$1(originalBroadcastChannelCtor$LWS.prototype, 'name');
+  // istanbul ignore if: this is a safety precaution, but currently unreachable via tests
+  if (typeof originalNameGetter$LWS !== 'function') {
+    return noop$LWS$1;
+  }
+  return function distortionBroadcastChannelNameGetter$LWS({
+    key: key$LWS
+  }) {
+    return [originalNameGetter$LWS, function name$LWS() {
+      const originalName$LWS = ReflectApply$LWS$1(originalNameGetter$LWS, this, []);
+      // Strip the sandbox-key namespace marker that
+      // `initDistortionBroadcastChannelCtor` prepended so that the
+      // visible `.name` matches the string the caller passed to
+      // `new BroadcastChannel(name)` and does not leak the sandbox
+      // key (via the instance or via `event.target.name` on
+      // received messages).
+      if (isGaterEnabledFeature$LWS('changesSince.264')) {
+        return removeNamespaceMarker$LWS(originalName$LWS, key$LWS);
+      }
+      // istanbul ignore next: ungated return is not reachable in coverage runs
+      return originalName$LWS;
+    }];
+  };
+}
 function initDistortionBroadcastChannelPostMessage$LWS({
   globalObject: globalObject$LWS
 }) {
@@ -5931,6 +6326,48 @@ function initDistortionCustomElementRegistryWhenDefined$LWS({
     }];
   };
 }
+const {
+  isAttackerOwnedNode: isAttackerOwnedNode$1$LWS
+} = rootValidator$LWS;
+// W-22382462: gate `document.adoptNode` against the source-document
+// shape that the chain depends on.
+//
+// `adoptNode` moves a node from a *different* document into the
+// current one (transferring ownership; unlike `importNode` which
+// copies). The W-22382462 chain abuses this to lift a hostile iframe
+// (with browser-XML-parser-synthesized `srcdoc`) out of a same-origin
+// iframe contentDocument into the top-level document.
+//
+// Refusal is delegated to `rootValidator.isAttackerOwnedNode`, which
+// returns true only when the source node belongs to a document whose
+// browsing context was loaded from a non-blank URL or has a `srcdoc`
+// attribute set. Same-document adoption, adoption from detached
+// documents (`createHTMLDocument`, `DOMParser`), and adoption from
+// blank-iframed documents proceed normally.
+function initDistortionDocumentAdoptNode$LWS({
+  globalObject: {
+    Document: {
+      prototype: {
+        adoptNode: originalAdoptNode$LWS
+      }
+    }
+  }
+}) {
+  const distortionEntry$LWS = [originalAdoptNode$LWS, function adoptNode$LWS(...args$LWS) {
+    if (isGaterEnabledFeature$LWS('changesSince.264') && args$LWS.length > 0) {
+      const node$LWS = args$LWS[0];
+      if (node$LWS !== null && node$LWS !== undefined) {
+        if (isAttackerOwnedNode$1$LWS(node$LWS, this)) {
+          throw new LockerSecurityError$LWS("Cannot use 'adoptNode'.");
+        }
+      }
+    }
+    return ReflectApply$LWS$1(originalAdoptNode$LWS, this, args$LWS);
+  }];
+  return function distortionDocumentAdoptNode$LWS() {
+    return distortionEntry$LWS;
+  };
+}
 function initDistortionDocumentCookieGetter$LWS({
   globalObject: {
     Document: Document$LWS
@@ -6196,6 +6633,48 @@ function initDistortionDocumentExecCommand$LWS({
     }];
   };
 }
+const {
+  isAttackerOwnedNode: isAttackerOwnedNode$LWS
+} = rootValidator$LWS;
+// W-22382462 Stage 3: gate `document.importNode` against the same
+// source-document shape that `adoptNode` is gated against.
+//
+// `importNode` copies a node from a *different* document into the
+// current one. The W-22382462 chain shape is identical to the
+// adoptNode case — a hostile iframe (with browser-XML-parser-
+// synthesized `srcdoc`) being lifted out of a same-origin iframe
+// contentDocument into the top-level document.
+//
+// Refusal is delegated to `rootValidator.isAttackerOwnedNode`, which
+// returns true only when the source node belongs to a document whose
+// browsing context was loaded from a non-blank URL or has a `srcdoc`
+// attribute set. Same-document import, import from detached documents
+// (`createHTMLDocument`, `DOMParser`), and import from blank-iframed
+// documents proceed normally.
+function initDistortionDocumentImportNode$LWS({
+  globalObject: {
+    Document: {
+      prototype: {
+        importNode: originalImportNode$LWS
+      }
+    }
+  }
+}) {
+  const distortionEntry$LWS = [originalImportNode$LWS, function importNode$LWS(...args$LWS) {
+    if (isGaterEnabledFeature$LWS('changesSince.264') && args$LWS.length > 0) {
+      const node$LWS = args$LWS[0];
+      if (node$LWS !== null && node$LWS !== undefined) {
+        if (isAttackerOwnedNode$LWS(node$LWS, this)) {
+          throw new LockerSecurityError$LWS("Cannot use 'importNode'.");
+        }
+      }
+    }
+    return ReflectApply$LWS$1(originalImportNode$LWS, this, args$LWS);
+  }];
+  return function distortionDocumentImportNode$LWS() {
+    return distortionEntry$LWS;
+  };
+}
 function initDistortionDocumentOnsecuritypolicyviolation$LWS({
   globalObject: {
     Document: {
@@ -6350,6 +6829,96 @@ function initDistortionDOMParserParseFromString$LWS({
     }];
   };
 }
+const ALLOW_SAME_ORIGIN_TOKEN$1$LWS = 'allow-same-origin';
+// Tokens whose addition to any DOMTokenList would relax sandbox-escape
+// boundaries. These are only meaningful on `iframe.sandbox`; on non-sandbox
+// token lists (classList, relList, etc.) they are no-ops, so a global
+// blocklist is the simplest enforcement boundary that closes the iframe
+// bypass without enumerating every host-element pairing.
+const blockedTokens$LWS = toSafeSet$LWS(new SetCtor$LWS$1([ALLOW_SAME_ORIGIN_TOKEN$1$LWS]));
+function normalizeToken$LWS(token$LWS) {
+  return ReflectApply$LWS$1(StringProtoToLowerCase$LWS, toSafeStringValue$LWS(token$LWS), []);
+}
+function enforceBlockedSandboxTokenList$LWS(tokens$LWS) {
+  if (isGaterEnabledFeature$LWS('changesSince.264')) {
+    for (let i$LWS = 0, {
+        length: length$LWS
+      } = tokens$LWS; i$LWS < length$LWS; i$LWS += 1) {
+      const normalized$LWS = normalizeToken$LWS(tokens$LWS[i$LWS]);
+      if (blockedTokens$LWS.has(normalized$LWS)) {
+        throw new LockerSecurityError$LWS(`DOMTokenList cannot accept "${normalized$LWS}" token`);
+      }
+    }
+  }
+}
+function initDistortionDOMTokenListAdd$LWS({
+  globalObject: {
+    DOMTokenList: {
+      prototype: {
+        add: originalAdd$LWS
+      }
+    }
+  }
+}) {
+  const distortionEntry$LWS = [originalAdd$LWS, function add$LWS(...tokens$LWS) {
+    enforceBlockedSandboxTokenList$LWS(tokens$LWS);
+    return ReflectApply$LWS$1(DOMTokenListProtoAdd$LWS, this, tokens$LWS);
+  }];
+  return function distortionDOMTokenListAdd$LWS() {
+    return distortionEntry$LWS;
+  };
+}
+function initDistortionDOMTokenListReplace$LWS({
+  globalObject: {
+    DOMTokenList: {
+      prototype: {
+        replace: originalReplace$LWS
+      }
+    }
+  }
+}) {
+  const distortionEntry$LWS = [originalReplace$LWS, function replace$LWS(oldToken$LWS, newToken$LWS) {
+    enforceBlockedSandboxTokenList$LWS([newToken$LWS]);
+    return ReflectApply$LWS$1(DOMTokenListProtoReplace$LWS, this, [oldToken$LWS, newToken$LWS]);
+  }];
+  return function distortionDOMTokenListReplace$LWS() {
+    return distortionEntry$LWS;
+  };
+}
+function initDistortionDOMTokenListToggle$LWS({
+  globalObject: {
+    DOMTokenList: {
+      prototype: {
+        toggle: originalToggle$LWS
+      }
+    }
+  }
+}) {
+  const distortionEntry$LWS = [originalToggle$LWS, function toggle$LWS(token$LWS, force$LWS) {
+    enforceBlockedSandboxTokenList$LWS([token$LWS]);
+    return ReflectApply$LWS$1(DOMTokenListProtoToggle$LWS, this, arguments.length < 2 ? [token$LWS] : [token$LWS, force$LWS]);
+  }];
+  return function distortionDOMTokenListToggle$LWS() {
+    return distortionEntry$LWS;
+  };
+}
+const ASCII_WHITESPACE_REGEXP$LWS = /[\t\n\f\r ]+/;
+function initDistortionDOMTokenListValueSetter$LWS({
+  globalObject: {
+    DOMTokenList: DOMTokenList$LWS
+  }
+}) {
+  const originalValueSetter$LWS = ObjectLookupOwnSetter$LWS(DOMTokenList$LWS.prototype, 'value');
+  const distortionEntry$LWS = [originalValueSetter$LWS, function value$LWS(newValue$LWS) {
+    const normalized$LWS = toSafeStringValue$LWS(newValue$LWS);
+    const tokens$LWS = ReflectApply$LWS$1(StringProtoSplit$LWS, normalized$LWS, [ASCII_WHITESPACE_REGEXP$LWS]);
+    enforceBlockedSandboxTokenList$LWS(tokens$LWS);
+    ReflectApply$LWS$1(DOMTokenListProtoValueSetter$LWS, this, [normalized$LWS]);
+  }];
+  return function distortionDOMTokenListValueSetter$LWS() {
+    return distortionEntry$LWS;
+  };
+}
 const {
   isSharedElement: isSharedElement$B$LWS,
   isAllowedSharedElementChild: isAllowedSharedElementChild$6$LWS
@@ -6463,6 +7032,9 @@ const namedNodeMapToElementCache$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1
 function pairElement$LWS(attrInstance$LWS, element$LWS) {
   namedNodeMapToElementCache$LWS.set(attrInstance$LWS, element$LWS);
 }
+function getOwnerElement$LWS(nodeNameMap$LWS) {
+  return namedNodeMapToElementCache$LWS.get(nodeNameMap$LWS);
+}
 function setNamedItemWithAttr$LWS(record$LWS, originalMethod$LWS, nodeNameMap$LWS, attr$LWS) {
   const element$LWS = namedNodeMapToElementCache$LWS.get(nodeNameMap$LWS);
   // istanbul ignore else: nothing to do if there's no element
@@ -6470,7 +7042,7 @@ function setNamedItemWithAttr$LWS(record$LWS, originalMethod$LWS, nodeNameMap$LW
     const attrName$LWS = ReflectApply$LWS$1(AttrProtoNameGetter$LWS, attr$LWS, []);
     const attrNamespace$LWS = ReflectApply$LWS$1(AttrProtoNamespaceURIGetter$LWS, attr$LWS, []);
     const normalizedNamespace$LWS = normalizeNamespace$LWS(attrNamespace$LWS);
-    const distortion$LWS = getAttributeDistortion$LWS(record$LWS, element$LWS, attrName$LWS, normalizedNamespace$LWS);
+    const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, element$LWS, attrName$LWS, normalizedNamespace$LWS);
     // istanbul ignore else: nothing to do if there's no distortion
     if (distortion$LWS) {
       const attrValue$LWS = ReflectApply$LWS$1(AttrProtoValueGetter$LWS, attr$LWS, []);
@@ -6538,13 +7110,21 @@ function initDistortionElementGetAttribute$LWS({
     }
   }
 }) {
-  return function distortionElementGetAttribute$LWS() {
+  return function distortionElementGetAttribute$LWS(record$LWS) {
     return [originalGetAttribute$LWS, function getAttribute$LWS(...args$LWS) {
       const {
         length: length$LWS
       } = args$LWS;
       if (isGaterEnabledFeature$LWS('changesSince.262') && length$LWS > 0) {
-        blockAccessToNonce$LWS(normalizeNamespacedAttributeName$LWS(toSafeStringValue$LWS(args$LWS[0])));
+        // Guard against TOCTOU attacks (e.g. shape-shifting
+        // toString): force the native call to see the same
+        // value our checks ran against.
+        const coerced$LWS = toSafeStringValue$LWS(args$LWS[0]);
+        args$LWS[0] = coerced$LWS;
+        const override$LWS = getAttributeGetterDistortion$LWS(record$LWS, this, coerced$LWS);
+        if (override$LWS !== undefined) {
+          return ReflectApply$LWS$1(override$LWS, this, []);
+        }
       }
       return ReflectApply$LWS$1(originalGetAttribute$LWS, this, args$LWS);
     }];
@@ -6552,6 +7132,7 @@ function initDistortionElementGetAttribute$LWS({
 }
 function initDistortionElementGetAttributeNode$LWS({
   globalObject: {
+    document: sandboxDocument$LWS,
     Element: {
       prototype: {
         getAttributeNode: originalGetAttributeNode$LWS
@@ -6559,13 +7140,38 @@ function initDistortionElementGetAttributeNode$LWS({
     }
   }
 }) {
-  return function distortionElementGetAttributeNode$LWS() {
+  return function distortionElementGetAttributeNode$LWS(record$LWS) {
     return [originalGetAttributeNode$LWS, function getAttributeNode$LWS(...args$LWS) {
       const {
         length: length$LWS
       } = args$LWS;
       if (isGaterEnabledFeature$LWS('changesSince.262') && length$LWS > 0) {
-        blockAccessToNonce$LWS(normalizeNamespacedAttributeName$LWS(toSafeStringValue$LWS(args$LWS[0])));
+        // Guard against TOCTOU attacks: force the native call
+        // to see the same value our checks ran against.
+        const coerced$LWS = toSafeStringValue$LWS(args$LWS[0]);
+        args$LWS[0] = coerced$LWS;
+        // Consult the read-side registry. A throwing
+        // registered getter (e.g. nonce) refuses the read
+        // by propagating its exception. A value-substituting
+        // getter (e.g. iframe.src pending URL) returns a
+        // string; if the native attribute store has no Attr
+        // for this name, synthesize a detached Attr carrying
+        // the substituted value so sandbox code can read
+        // .value as expected. If the native store already
+        // has an Attr, prefer it.
+        const override$LWS = getAttributeGetterDistortion$LWS(record$LWS, this, coerced$LWS);
+        if (override$LWS !== undefined) {
+          const overrideValue$LWS = ReflectApply$LWS$1(override$LWS, this, []);
+          if (overrideValue$LWS !== null && overrideValue$LWS !== undefined) {
+            const nativeAttr$LWS = ReflectApply$LWS$1(originalGetAttributeNode$LWS, this, args$LWS);
+            if (nativeAttr$LWS !== null) {
+              return nativeAttr$LWS;
+            }
+            const synth$LWS = ReflectApply$LWS$1(DocumentProtoCreateAttribute$LWS, sandboxDocument$LWS, [coerced$LWS]);
+            synth$LWS.value = overrideValue$LWS;
+            return synth$LWS;
+          }
+        }
       }
       return ReflectApply$LWS$1(originalGetAttributeNode$LWS, this, args$LWS);
     }];
@@ -6573,6 +7179,7 @@ function initDistortionElementGetAttributeNode$LWS({
 }
 function initDistortionElementGetAttributeNodeNS$LWS({
   globalObject: {
+    document: sandboxDocument$LWS,
     Element: {
       prototype: {
         getAttributeNodeNS: originalGetAttributeNodeNS$LWS
@@ -6580,13 +7187,41 @@ function initDistortionElementGetAttributeNodeNS$LWS({
     }
   }
 }) {
-  return function distortionElementGetAttributeNodeNS$LWS() {
+  return function distortionElementGetAttributeNodeNS$LWS(record$LWS) {
     return [originalGetAttributeNodeNS$LWS, function getAttributeNodeNS$LWS(...args$LWS) {
       const {
         length: length$LWS
       } = args$LWS;
       if (isGaterEnabledFeature$LWS('changesSince.262') && length$LWS >= 2) {
-        blockAccessToNonce$LWS(normalizeNamespacedAttributeName$LWS(toSafeStringValue$LWS(args$LWS[1])));
+        // Guard against TOCTOU attacks: force the native call
+        // to see the same values our checks ran against.
+        const coercedNS$LWS = args$LWS[0] === null || args$LWS[0] === undefined ? args$LWS[0] : toSafeStringValue$LWS(args$LWS[0]);
+        const coercedName$LWS = toSafeStringValue$LWS(args$LWS[1]);
+        args$LWS[0] = coercedNS$LWS;
+        args$LWS[1] = coercedName$LWS;
+        const ns$LWS = normalizeNamespace$LWS(coercedNS$LWS);
+        // Consult the read-side registry. A throwing
+        // registered getter (e.g. nonce) refuses the read
+        // by propagating its exception. A value-substituting
+        // getter (e.g. iframe.src pending URL) returns a
+        // string; if the native attribute store has no Attr
+        // for this name+namespace, synthesize a detached
+        // Attr carrying the substituted value so sandbox
+        // code can read .value as expected. If the native
+        // store already has an Attr, prefer it.
+        const override$LWS = getAttributeGetterDistortion$LWS(record$LWS, this, coercedName$LWS, ns$LWS);
+        if (override$LWS !== undefined) {
+          const overrideValue$LWS = ReflectApply$LWS$1(override$LWS, this, []);
+          if (overrideValue$LWS !== null && overrideValue$LWS !== undefined) {
+            const nativeAttr$LWS = ReflectApply$LWS$1(originalGetAttributeNodeNS$LWS, this, args$LWS);
+            if (nativeAttr$LWS !== null) {
+              return nativeAttr$LWS;
+            }
+            const synth$LWS = ReflectApply$LWS$1(DocumentProtoCreateAttributeNS$LWS, sandboxDocument$LWS, [ns$LWS, coercedName$LWS]);
+            synth$LWS.value = overrideValue$LWS;
+            return synth$LWS;
+          }
+        }
       }
       return ReflectApply$LWS$1(originalGetAttributeNodeNS$LWS, this, args$LWS);
     }];
@@ -6601,13 +7236,23 @@ function initDistortionElementGetAttributeNS$LWS({
     }
   }
 }) {
-  return function distortionElementGetAttributeNS$LWS() {
+  return function distortionElementGetAttributeNS$LWS(record$LWS) {
     return [originalGetAttributeNS$LWS, function getAttributeNS$LWS(...args$LWS) {
       const {
         length: length$LWS
       } = args$LWS;
       if (isGaterEnabledFeature$LWS('changesSince.262') && length$LWS >= 2) {
-        blockAccessToNonce$LWS(normalizeNamespacedAttributeName$LWS(toSafeStringValue$LWS(args$LWS[1])));
+        // Guard against TOCTOU attacks: force the native call
+        // to see the same values our checks ran against.
+        const coercedNS$LWS = args$LWS[0] === null || args$LWS[0] === undefined ? args$LWS[0] : toSafeStringValue$LWS(args$LWS[0]);
+        const coercedName$LWS = toSafeStringValue$LWS(args$LWS[1]);
+        args$LWS[0] = coercedNS$LWS;
+        args$LWS[1] = coercedName$LWS;
+        const ns$LWS = normalizeNamespace$LWS(coercedNS$LWS);
+        const override$LWS = getAttributeGetterDistortion$LWS(record$LWS, this, coercedName$LWS, ns$LWS);
+        if (override$LWS !== undefined) {
+          return ReflectApply$LWS$1(override$LWS, this, []);
+        }
       }
       return ReflectApply$LWS$1(originalGetAttributeNS$LWS, this, args$LWS);
     }];
@@ -6713,7 +7358,7 @@ function scriptPropertySetters$LWS(incomingThis$LWS, property$LWS, valueAsTruste
   return false;
 }
 const {
-  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$6$LWS,
+  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$7$LWS,
   isSharedElement: isSharedElement$y$LWS
 } = rootValidator$LWS;
 function initDistortionElementInnerHTMLSetter$LWS({
@@ -6768,7 +7413,7 @@ function initDistortionElementInnerHTMLSetter$LWS({
         // malicious markup on a later engine coercion (see toSafeStringValue() docs).
         value$LWS = toSafeStringValue$LWS(value$LWS);
       }
-      if (isIframeSrcdocScriptAttack$6$LWS(value$LWS)) {
+      if (isIframeSrcdocScriptAttack$7$LWS(value$LWS)) {
         throw new LockerSecurityError$LWS(`Cannot set 'innerHTML' using an unsecure ${toSafeTemplateStringValue$LWS(value$LWS)}.`);
       }
       ReflectApply$LWS$1(originalInnerHTMLSetter$LWS, this, [value$LWS]);
@@ -6806,7 +7451,7 @@ function initDistortionElementInsertAdjacentElement$LWS({
   };
 }
 const {
-  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$5$LWS,
+  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$6$LWS,
   isSharedElement: isSharedElement$w$LWS
 } = rootValidator$LWS;
 const allowedElementHTMLRegExp$LWS = /^\s*<(link|script|style)/i;
@@ -6838,7 +7483,7 @@ function initDistortionElementInsertAdjacentHTML$LWS({
         const contentType$LWS = this instanceof SVGElement ? ContentType$LWS.SVG : ContentType$LWS.HTML;
         args$LWS[1] = lwsInternalPolicy$LWS.createHTML(args$LWS[1], key$LWS, contentType$LWS);
         // If the sanitized string is still insecure, throw an exception
-        if (isIframeSrcdocScriptAttack$5$LWS(args$LWS[1])) {
+        if (isIframeSrcdocScriptAttack$6$LWS(args$LWS[1])) {
           throw new LockerSecurityError$LWS(`Cannot set 'insertAdjacentHTML' using an unsecure ${toSafeTemplateStringValue$LWS(args$LWS[1])}.`);
         }
       }
@@ -6865,7 +7510,7 @@ function initDistortionElementOuterHTMLGetter$LWS({
   };
 }
 const {
-  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$4$LWS,
+  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$5$LWS,
   isSharedElement: isSharedElement$v$LWS
 } = rootValidator$LWS;
 function initDistortionElementOuterHTMLSetter$LWS({
@@ -6891,7 +7536,7 @@ function initDistortionElementOuterHTMLSetter$LWS({
       const html$LWS = lwsInternalPolicy$LWS.createHTML(value$LWS, key$LWS, ContentType$LWS.HTML);
       // Ensure that the created html snippet is secure (no mXSS)
       if (isGaterEnabledFeature$LWS('changesSince.260')) {
-        if (isIframeSrcdocScriptAttack$4$LWS(html$LWS)) {
+        if (isIframeSrcdocScriptAttack$5$LWS(html$LWS)) {
           throw new LockerSecurityError$LWS(`Cannot set 'outerHTML' using an unsecure ${toSafeTemplateStringValue$LWS(value$LWS)}.`);
         }
       }
@@ -6961,6 +7606,89 @@ function initDistortionElementRemove$LWS({
     return distortionEntry$LWS;
   };
 }
+
+// Intentionally narrow: only 'sandbox' needs protection today. If more iframe
+// attributes require removal-blocking in the future, generalize to a Set.
+const SANDBOX_ATTR$4$LWS = 'sandbox';
+function initDistortionElementRemoveAttribute$LWS({
+  globalObject: {
+    Element: {
+      prototype: {
+        removeAttribute: originalRemoveAttribute$LWS
+      }
+    },
+    HTMLIFrameElement: HTMLIFrameElement$LWS
+  }
+}) {
+  const distortionEntry$LWS = [originalRemoveAttribute$LWS, function removeAttribute$LWS(...args$LWS) {
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      if (args$LWS.length > 0) {
+        const attrName$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, toSafeStringValue$LWS(args$LWS[0]), []);
+        if (attrName$LWS === SANDBOX_ATTR$4$LWS && this instanceof HTMLIFrameElement$LWS) {
+          throw new LockerSecurityError$LWS("Cannot remove 'sandbox' attribute from HTMLIFrameElement.");
+        }
+      }
+    }
+    return ReflectApply$LWS$1(ElementProtoRemoveAttribute$LWS, this, args$LWS);
+  }];
+  return function distortionElementRemoveAttribute$LWS() {
+    return distortionEntry$LWS;
+  };
+}
+const SANDBOX_ATTR$3$LWS = 'sandbox';
+function initDistortionElementRemoveAttributeNode$LWS({
+  globalObject: {
+    Attr: Attr$LWS,
+    Element: {
+      prototype: {
+        removeAttributeNode: originalRemoveAttributeNode$LWS
+      }
+    },
+    HTMLIFrameElement: HTMLIFrameElement$LWS
+  }
+}) {
+  const distortionEntry$LWS = [originalRemoveAttributeNode$LWS, function removeAttributeNode$LWS(...args$LWS) {
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      const attr$LWS = args$LWS.length ? args$LWS[0] : undefined;
+      if (attr$LWS instanceof Attr$LWS) {
+        const attrName$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, ReflectApply$LWS$1(AttrProtoNameGetter$LWS, attr$LWS, []), []);
+        if (attrName$LWS === SANDBOX_ATTR$3$LWS && this instanceof HTMLIFrameElement$LWS) {
+          throw new LockerSecurityError$LWS("Cannot remove 'sandbox' attribute from HTMLIFrameElement.");
+        }
+      }
+    }
+    return ReflectApply$LWS$1(ElementProtoRemoveAttributeNode$LWS, this, args$LWS);
+  }];
+  return function distortionElementRemoveAttributeNode$LWS() {
+    return distortionEntry$LWS;
+  };
+}
+const SANDBOX_ATTR$2$LWS = 'sandbox';
+function initDistortionElementRemoveAttributeNS$LWS({
+  globalObject: {
+    Element: {
+      prototype: {
+        removeAttributeNS: originalRemoveAttributeNS$LWS
+      }
+    },
+    HTMLIFrameElement: HTMLIFrameElement$LWS
+  }
+}) {
+  const distortionEntry$LWS = [originalRemoveAttributeNS$LWS, function removeAttributeNS$LWS(...args$LWS) {
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      if (args$LWS.length > 1) {
+        const attrName$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, toSafeStringValue$LWS(args$LWS[1]), []);
+        if (attrName$LWS === SANDBOX_ATTR$2$LWS && this instanceof HTMLIFrameElement$LWS) {
+          throw new LockerSecurityError$LWS("Cannot remove 'sandbox' attribute from HTMLIFrameElement.");
+        }
+      }
+    }
+    return ReflectApply$LWS$1(ElementProtoRemoveAttributeNS$LWS, this, args$LWS);
+  }];
+  return function distortionElementRemoveAttributeNS$LWS() {
+    return distortionEntry$LWS;
+  };
+}
 const {
   isSharedElement: isSharedElement$s$LWS
 } = rootValidator$LWS;
@@ -7021,7 +7749,7 @@ function initDistortionElementSetAttribute$LWS({
       if (args$LWS.length > 1) {
         const attrName$LWS = normalizeNamespacedAttributeName$LWS(toSafeStringValue$LWS(args$LWS[0]));
         const attrValue$LWS = toSafeStringValue$LWS(args$LWS[1]);
-        const distortion$LWS = getAttributeDistortion$LWS(record$LWS, this, attrName$LWS);
+        const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, this, attrName$LWS);
         if (distortion$LWS) {
           ReflectApply$LWS$1(distortion$LWS, this, [attrValue$LWS]);
           return;
@@ -7064,7 +7792,7 @@ function initDistortionElementSetAttributeNode$LWS({
       const attrName$LWS = normalizeNamespacedAttributeName$LWS(ReflectApply$LWS$1(AttrProtoNameGetter$LWS, attr$LWS, []));
       const attrNamespace$LWS = ReflectApply$LWS$1(AttrProtoNamespaceURIGetter$LWS, attr$LWS, []);
       const normalizedNamespace$LWS = normalizeNamespace$LWS(attrNamespace$LWS);
-      const distortion$LWS = getAttributeDistortion$LWS(record$LWS, this, attrName$LWS, normalizedNamespace$LWS);
+      const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, this, attrName$LWS, normalizedNamespace$LWS);
       if (distortion$LWS) {
         const oldAttr$LWS = ReflectApply$LWS$1(ElementProtoGetAttributeNode$LWS, this, [attrName$LWS]);
         if (oldAttr$LWS) {
@@ -7122,7 +7850,7 @@ function initDistortionElementSetAttributeNodeNS$LWS({
       const attrName$LWS = normalizeNamespacedAttributeName$LWS(ReflectApply$LWS$1(AttrProtoNameGetter$LWS, attr$LWS, []));
       const attrNamespace$LWS = ReflectApply$LWS$1(AttrProtoNamespaceURIGetter$LWS, attr$LWS, []);
       const normalizedNamespace$LWS = normalizeNamespace$LWS(attrNamespace$LWS);
-      const distortion$LWS = getAttributeDistortion$LWS(record$LWS, this, attrName$LWS, normalizedNamespace$LWS);
+      const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, this, attrName$LWS, normalizedNamespace$LWS);
       if (distortion$LWS) {
         const oldAttr$LWS = ReflectApply$LWS$1(ElementProtoGetAttributeNodeNS$LWS, this, [attrNamespace$LWS, attrName$LWS]);
         if (oldAttr$LWS) {
@@ -7178,7 +7906,7 @@ function initDistortionElementSetAttributeNS$LWS({
       const attrName$LWS = normalizeNamespacedAttributeName$LWS(toSafeStringValue$LWS(args$LWS[1]));
       const attrValue$LWS = toSafeStringValue$LWS(args$LWS[2]);
       const normalizedNamespace$LWS = normalizeNamespace$LWS(attrNamespace$LWS);
-      const distortion$LWS = getAttributeDistortion$LWS(record$LWS, this, attrName$LWS, normalizedNamespace$LWS);
+      const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, this, attrName$LWS, normalizedNamespace$LWS);
       // istanbul ignore else: needs default platform behavior test
       if (distortion$LWS) {
         ReflectApply$LWS$1(distortion$LWS, this, [attrValue$LWS]);
@@ -7204,7 +7932,7 @@ function initDistortionElementSetAttributeNS$LWS({
   };
 }
 const {
-  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$3$LWS,
+  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$4$LWS,
   isSharedElement: isSharedElement$q$LWS
 } = rootValidator$LWS;
 function initDistortionElementSetHTML$LWS({
@@ -7249,7 +7977,7 @@ function initDistortionElementSetHTML$LWS({
         // This will be in addition to the sanitization we have.
         const contentType$LWS = isSVGElement$LWS ? ContentType$LWS.SVG : ContentType$LWS.HTML;
         args$LWS[0] = lwsInternalPolicy$LWS.createHTML(normalizedValue$LWS, key$LWS, contentType$LWS);
-        if (isIframeSrcdocScriptAttack$3$LWS(args$LWS[0])) {
+        if (isIframeSrcdocScriptAttack$4$LWS(args$LWS[0])) {
           throw new LockerSecurityError$LWS(`Cannot 'setHTML' using an unsecure ${toSafeTemplateStringValue$LWS(args$LWS[0])}.`);
         }
       }
@@ -7258,7 +7986,7 @@ function initDistortionElementSetHTML$LWS({
   };
 }
 const {
-  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$2$LWS,
+  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$3$LWS,
   isSharedElement: isSharedElement$p$LWS
 } = rootValidator$LWS;
 function initDistortionElementSetHTMLUnsafe$LWS({
@@ -7319,7 +8047,7 @@ function initDistortionElementSetHTMLUnsafe$LWS({
         const contentType$LWS = isSVGElement$LWS ? ContentType$LWS.SVG : ContentType$LWS.HTML;
         normalizedValue$LWS = lwsInternalPolicy$LWS.createHTML(normalizedValue$LWS, key$LWS, contentType$LWS);
       }
-      if (isIframeSrcdocScriptAttack$2$LWS(normalizedValue$LWS)) {
+      if (isIframeSrcdocScriptAttack$3$LWS(normalizedValue$LWS)) {
         throw new LockerSecurityError$LWS(`Cannot 'setHTMLUnsafe' using an unsecure ${toSafeTemplateStringValue$LWS(normalizedValue$LWS)}.`);
       }
       ReflectApply$LWS$1(originalSetHTMLUnsafe$LWS, this, [normalizedValue$LWS]);
@@ -7362,7 +8090,7 @@ function initDistortionElementToggleAttribute$LWS({
       // istanbul ignore else: needs default platform behavior test
       if (length$LWS > 0) {
         const attrName$LWS = toSafeStringValue$LWS(args$LWS[0]);
-        const distortion$LWS = getAttributeDistortion$LWS(record$LWS, this, attrName$LWS);
+        const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, this, attrName$LWS);
         // istanbul ignore else: needs default platform behavior test
         if (distortion$LWS) {
           const distortionArgs$LWS = length$LWS > 1 ? [args$LWS[1]] : [];
@@ -7496,6 +8224,184 @@ function initDistortionEventTargetAddEventListener$LWS({
     return [originalAddEventListener$LWS, addEventListener$LWS];
   };
 }
+
+// @W-18977628 — Reserved event types that sandboxed code must never dispatch.
+// These are internal Aura framework events whose listeners run outside the
+// sandbox and pass privileged unsandboxed references to the caller.
+const BLOCKED_DISPATCH_EVENT_TYPES$LWS = toSafeSet$LWS(new SetCtor$LWS$1(['aurainteropfindowner']));
+function initDistortionEventTargetDispatchEvent$LWS({
+  globalObject: {
+    EventTarget: {
+      prototype: {
+        dispatchEvent: originalDispatchEvent$LWS
+      }
+    }
+  }
+}) {
+  return function distortionEventTargetDispatchEvent$LWS() {
+    function dispatchEvent$LWS(...args$LWS) {
+      const {
+        length: length$LWS
+      } = args$LWS;
+      // Ensure that we fallback to the default platform behavior which
+      // should fail if less than 1 argument is provided.
+      // istanbul ignore else: needs default platform behavior test
+      if (length$LWS > 0 && isGaterEnabledFeature$LWS('changesSince.264')) {
+        const eventType$LWS = toSafeStringValue$LWS(ReflectApply$LWS$1(EventProtoTypeGetter$LWS, args$LWS[0], []));
+        if (BLOCKED_DISPATCH_EVENT_TYPES$LWS.has(eventType$LWS)) {
+          throw new LockerSecurityError$LWS(`Cannot dispatch '${eventType$LWS}' event.`);
+        }
+      }
+      return ReflectApply$LWS$1(originalDispatchEvent$LWS, this, args$LWS);
+    }
+    return [originalDispatchEvent$LWS, dispatchEvent$LWS];
+  };
+}
+
+// W-22602807: shared helper for distorting an iframe contentWindow realm's
+// function-invocation primitives (Function.prototype.call/apply/bind,
+// Reflect.apply/construct).
+//
+// The cross-realm leak: sandbox code obtains a same-origin iframe's invocation
+// primitive and uses it to invoke a constructor/evaluator. The callee can
+// arrive as a RAW callable whose realm's `document` is undistorted, so
+// `document.cookie` in a compiled body resolves to the native getter and leaks
+// the top-level cookie.
+//
+// Containment tracks the OUTERMOST primitive actually invoked through the
+// membrane (composition depth is irrelevant: in `apply.call(F, ...)` only the
+// outer `.call` is invoked). So every invocation primitive reachable on the
+// iframe realm must be distorted. Each re-resolves the callee (the function
+// being invoked) to its distorted counterpart in the ROOT record's map when
+// one exists, then delegates to the native primitive — so a raw native
+// Function/eval reached cross-realm becomes the sandbox-distorted version,
+// while ordinary usage is an untouched passthrough.
+// Returns the host iframe element if `globalObject
+// ` is a same-origin iframe
+// contentWindow realm (the only realm we distort), else undefined. Gated on
+// changesSince.264: when the gate is off, no entry is installed and the
+// primitive keeps its native behavior. One check here covers all five
+// invocation-primitive distortions.
+function getDistortableFrameElement$LWS(globalObject$LWS) {
+  if (!isGaterEnabledFeature$LWS('changesSince.264')) {
+    return undefined;
+  }
+  let frameElement$LWS;
+  try {
+    frameElement$LWS = ReflectApply$LWS$1(WindowFrameElementGetter$LWS, globalObject$LWS, []);
+  } catch (_unused2$LWS) {
+    // Cross-origin / non-window realm: not our target.
+    return undefined;
+  }
+  return frameElement$LWS || undefined;
+}
+// Re-resolve `callee` to its distorted counterpart from the root distortion
+// map, if one exists; otherwise return it unchanged.
+//
+// This reads the assembled `root.distortions` map at invocation time — the same
+// map the near-membrane's distortionCallback consults. That is deliberate: a
+// foreign invocation primitive can deliver a callee (e.g. the sandbox `Function`
+// ctor) that has crossed the membrane as a RAW reference, bypassing the
+// distortion the membrane would normally apply on a direct call. Looking the
+// callee up in the map re-attaches that distortion. We rely on the map's
+// invariant that a callable key maps to a callable replacement; the
+// `distorted !== callee` check skips identity mappings (e.g. `document`,
+// `location`, the global object, which map to themselves), and the invocation
+// primitives require a callable target regardless, so a non-callable could
+// never be reached here without throwing at the call site.
+function substituteDistortedCallee$LWS(root$LWS, callee$LWS) {
+  const distorted$LWS = root$LWS.distortions.get(callee$LWS);
+  if (distorted$LWS !== undefined && distorted$LWS !== callee$LWS) {
+    return distorted$LWS;
+  }
+  return callee$LWS;
+}
+
+// W-22602807: distort an iframe contentWindow realm's Function.prototype.apply.
+// See cross-realm-invocation.ts for the threat model.
+function initDistortionFunctionApply$LWS({
+  globalObject: {
+    Function: {
+      prototype: {
+        apply: originalApply$LWS
+      }
+    }
+  }
+}) {
+  return function distortionFunctionApply$LWS({
+    globalObject: globalObject$LWS,
+    root: root$LWS
+  }) {
+    if (!getDistortableFrameElement$LWS(globalObject$LWS)) {
+      return undefined;
+    }
+    return [originalApply$LWS,
+    // `this` is the callee; (thisArg, argsArray) its binding and args.
+    // `apply` accepts a null/undefined argsArray, which ReflectApply
+    // rejects, so normalize to [].
+    function apply$LWS(thisArg$LWS, argsArray$LWS) {
+      return ReflectApply$LWS$1(substituteDistortedCallee$LWS(root$LWS, this), thisArg$LWS, argsArray$LWS == null ? [] : argsArray$LWS);
+    }];
+  };
+}
+
+// W-22602807: distort an iframe contentWindow realm's Function.prototype.bind.
+// See cross-realm-invocation.ts for the threat model.
+//
+// bind defers invocation: it returns a bound function invoked later. We
+// substitute the callee for its distorted counterpart FIRST, then bind that,
+// so the returned bound function wraps the sandbox-distorted callee.
+function initDistortionFunctionBind$LWS({
+  globalObject: {
+    Function: {
+      prototype: {
+        bind: originalBind$LWS
+      }
+    }
+  }
+}) {
+  return function distortionFunctionBind$LWS({
+    globalObject: globalObject$LWS,
+    root: root$LWS
+  }) {
+    if (!getDistortableFrameElement$LWS(globalObject$LWS)) {
+      return undefined;
+    }
+    return [originalBind$LWS,
+    // `this` is the callee; (thisArg, ...boundArgs) the binding and
+    // partially-applied args. Bind the substituted callee with the
+    // sandbox-realm bind so the result is a sandbox-realm bound function.
+    function bind$LWS(thisArg$LWS, ...boundArgs$LWS) {
+      return ReflectApply$LWS$1(FunctionProtoBind$LWS, substituteDistortedCallee$LWS(root$LWS, this), [thisArg$LWS, ...boundArgs$LWS]);
+    }];
+  };
+}
+
+// W-22602807: distort an iframe contentWindow realm's Function.prototype.call.
+// See cross-realm-invocation.ts for the threat model.
+function initDistortionFunctionCall$LWS({
+  globalObject: {
+    Function: {
+      prototype: {
+        call: originalCall$LWS
+      }
+    }
+  }
+}) {
+  return function distortionFunctionCall$LWS({
+    globalObject: globalObject$LWS,
+    root: root$LWS
+  }) {
+    if (!getDistortableFrameElement$LWS(globalObject$LWS)) {
+      return undefined;
+    }
+    return [originalCall$LWS,
+    // `this` is the callee; (thisArg, ...args) its binding and arguments.
+    function call$LWS(thisArg$LWS, ...args$LWS) {
+      return ReflectApply$LWS$1(substituteDistortedCallee$LWS(root$LWS, this), thisArg$LWS, args$LWS);
+    }];
+  };
+}
 function initDistortionFunction$LWS({
   UNCOMPILED_CONTEXT: UNCOMPILED_CONTEXT$LWS,
   globalObject: {
@@ -7596,11 +8502,35 @@ function initDistortionHistoryReplaceState$LWS({
   };
 }
 
-// Anchor elements allow blob: URLs in addition to standard schemes for download links
-const ANCHOR_URL_SCHEMES_LIST$LWS = toSafeArray$LWS$1(['about:', 'blob:', 'http:', 'https:']);
-function isValidAnchorURLScheme$LWS(url$LWS) {
+// Only schemes that can trigger arbitrary JavaScript execution when an anchor is
+// navigated are blocked. Everything else (mailto:, tel:, sms:, http:, https:,
+// blob:, about:, relative urls) is permitted: those navigate or hand off to an
+// external app and cannot execute script.
+// eslint-disable-next-line no-script-url
+const ANCHOR_BLOCKED_URL_SCHEMES_LIST$LWS = toSafeArray$LWS$1(['data:', 'javascript:', 'vbscript:']);
+const ANCHOR_BLOCKED_SCHEME_ERROR_MESSAGE$LWS = 'HTMLAnchorElement href does not support data:, javascript: or vbscript: schemes.';
+// The scheme is read back through the browser's own URL parser via the
+// normalizer anchor, so case/whitespace/zero-width evasion variants resolve to
+// the same normalized protocol the browser would execute. A payload that does
+// not normalize to a blocked scheme is also not executed as one by the browser.
+function normalizedSchemeIsBlocked$LWS() {
+  return ANCHOR_BLOCKED_URL_SCHEMES_LIST$LWS.includes(ReflectApply$LWS$1(HTMLAnchorElementProtoProtocolGetter$LWS, normalizerAnchor$LWS, []));
+}
+// Guards the `href` setter / `href` attribute: the whole URL is assigned to the
+// normalizer, then its resolved protocol is checked.
+function isBlockedAnchorHref$LWS(url$LWS) {
   ReflectApply$LWS$1(HTMLAnchorElementProtoHrefSetter$LWS, normalizerAnchor$LWS, [url$LWS]);
-  return ANCHOR_URL_SCHEMES_LIST$LWS.includes(ReflectApply$LWS$1(HTMLAnchorElementProtoProtocolGetter$LWS, normalizerAnchor$LWS, []));
+  return normalizedSchemeIsBlocked$LWS();
+}
+// Guards the `protocol` setter: `a.protocol = value` resolves against the
+// anchor's current href, so the same current href is replayed onto the
+// normalizer before applying the new scheme. This mirrors exactly what the
+// native setter would produce, on a throwaway anchor.
+function isBlockedAnchorProtocolChange$LWS(anchor$LWS, value$LWS) {
+  const currentHref$LWS = ReflectApply$LWS$1(HTMLAnchorElementProtoHrefGetter$LWS, anchor$LWS, []);
+  ReflectApply$LWS$1(HTMLAnchorElementProtoHrefSetter$LWS, normalizerAnchor$LWS, [currentHref$LWS]);
+  ReflectApply$LWS$1(HTMLAnchorElementProtoProtocolSetter$LWS, normalizerAnchor$LWS, [value$LWS]);
+  return normalizedSchemeIsBlocked$LWS();
 }
 function initDistortionHTMLAnchorElementHrefSetter$LWS({
   globalObject: {
@@ -7610,20 +8540,45 @@ function initDistortionHTMLAnchorElementHrefSetter$LWS({
   const originalHrefSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLAnchorElement$LWS.prototype, 'href');
   function href$LWS(value$LWS) {
     const urlString$LWS = sanitizeURLForElement$LWS(value$LWS);
-    if (isGaterEnabledFeature$LWS('changesSince.262') && !isValidAnchorURLScheme$LWS(urlString$LWS)) {
-      throw new LockerSecurityError$LWS('HTMLAnchorElement.href supports http://, https://, blob: schemes, relative urls and about:blank.');
+    if (isGaterEnabledFeature$LWS('htmlAnchorElementHrefValidation')) {
+      if (isBlockedAnchorHref$LWS(urlString$LWS)) {
+        throw new LockerSecurityError$LWS(ANCHOR_BLOCKED_SCHEME_ERROR_MESSAGE$LWS);
+      }
+      const parsedURL$LWS = parseURL$LWS(urlString$LWS);
+      if (!isAllowedEndpointURL$LWS(parsedURL$LWS)) {
+        throw new LockerSecurityError$LWS(`Cannot request disallowed endpoint: ${toSafeTemplateStringValue$LWS(parsedURL$LWS.normalizedURL)}`);
+      }
     }
     ReflectApply$LWS$1(HTMLAnchorElementProtoHrefSetter$LWS, this, [urlString$LWS]);
   }
   const distortionEntry$LWS = [originalHrefSetter$LWS, href$LWS];
   return function distortionHTMLAnchorElementHrefSetter$LWS(record$LWS) {
-    if (isGaterEnabledFeature$LWS('changesSince.262')) {
-      registerAttributeDistortion$LWS(record$LWS, HTMLAnchorElement$LWS, 'href', NAMESPACE_DEFAULT$LWS, href$LWS);
+    if (isGaterEnabledFeature$LWS('htmlAnchorElementHrefValidation')) {
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLAnchorElement$LWS, 'href', NAMESPACE_DEFAULT$LWS, href$LWS);
     }
     // This will fall back to the original href setter if the gate is not enabled
     return distortionEntry$LWS;
   };
 }
+function initDistortionHTMLAnchorElementProtocolSetter$LWS({
+  globalObject: {
+    HTMLAnchorElement: HTMLAnchorElement$LWS
+  }
+}) {
+  const originalProtocolSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLAnchorElement$LWS.prototype, 'protocol');
+  function protocol$LWS(value$LWS) {
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      if (isBlockedAnchorProtocolChange$LWS(this, value$LWS)) {
+        throw new LockerSecurityError$LWS(ANCHOR_BLOCKED_SCHEME_ERROR_MESSAGE$LWS);
+      }
+    }
+    ReflectApply$LWS$1(originalProtocolSetter$LWS, this, [value$LWS]);
+  }
+  const distortionEntry$LWS = [originalProtocolSetter$LWS, protocol$LWS];
+  return function distortionHTMLAnchorElementProtocolSetter$LWS() {
+    return distortionEntry$LWS;
+  };
+}
 function initDistortionHTMLBaseElementHrefSetter$LWS({
   globalObject: {
     HTMLBaseElement: HTMLBaseElement$LWS
@@ -7686,7 +8641,7 @@ function initDistortionHTMLButtonElementFormActionSetter$LWS({
         }
         ReflectApply$LWS$1(HTMLButtonElementProtoFormActionSetter$LWS, this, [urlString$LWS]);
       }
-      registerAttributeDistortion$LWS(record$LWS, HTMLButtonElement$LWS, 'formaction', NAMESPACE_DEFAULT$LWS, formAction$LWS);
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLButtonElement$LWS, 'formaction', NAMESPACE_DEFAULT$LWS, formAction$LWS);
       return [originalFormActionSetter$LWS, formAction$LWS];
     }
     // istanbul ignore next: ungated return is not reachable in coverage runs
@@ -7865,7 +8820,7 @@ function initDistortionHTMLFormElementActionSetter$LWS({
         }
         ReflectApply$LWS$1(HTMLFormElementProtoActionSetter$LWS, this, [urlString$LWS]);
       }
-      registerAttributeDistortion$LWS(record$LWS, HTMLFormElement$LWS, 'action', NAMESPACE_DEFAULT$LWS, action$LWS);
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLFormElement$LWS, 'action', NAMESPACE_DEFAULT$LWS, action$LWS);
       return [originalActionSetter$LWS, action$LWS];
     }
     // istanbul ignore next: ungated return is not reachable in coverage runs
@@ -7942,13 +8897,145 @@ function initDistortionHTMLIFrameElementSandboxGetter$LWS({
     }];
   };
 }
+
+// Provenance: the design for this pipeline (per-iframe pending-URL
+const pendingURLs$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
+const inflightControllers$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
+// W-22382462: iframes whose pre-flight detected an attack pattern in the
+// fetched response body. The setter checks this set at entry and throws
+// synchronously on any subsequent write attempt, so the violation is
+// observable from sandboxed code on the *next* sync touchpoint after
+// the async pre-flight resolved hostile.
+const poisonedIframes$LWS = toSafeWeakSet$LWS$1(new WeakSetCtor$LWS$1());
+// W-22382462: cross-iframe URL rejection cache. When a pre-flight
+// detects hostile, the URL's pathname is added here. Any subsequent
+// iframe.src assignment to a URL with the same pathname (regardless of
+// the iframe instance, query string, or fragment) throws synchronously
+// without re-fetching. Rationale: in this threat model attacker-
+// controllable content surfaces are deployable static resources whose
+// pathname maps 1:1 to their body. Re-fetching the same hostile body
+// for every fresh iframe is wasted work and provides an attacker a
+// re-attempt window if a transient network failure lets the second
+// fetch succeed where the first failed; pathname-keyed rejection
+// closes both.
+const rejectedPathnames$LWS = toSafeSet$LWS(new SetCtor$LWS$1());
+const detachedPending$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1());
+function getPendingURL$LWS(iframe$LWS) {
+  return pendingURLs$LWS.get(iframe$LWS);
+}
+function setPendingURL$LWS(iframe$LWS, url$LWS) {
+  pendingURLs$LWS.set(iframe$LWS, url$LWS);
+}
+function clearPendingURL$LWS(iframe$LWS) {
+  pendingURLs$LWS.delete(iframe$LWS);
+}
+function abortInflightPreflight$LWS(iframe$LWS) {
+  const controller$LWS = inflightControllers$LWS.get(iframe$LWS);
+  if (controller$LWS !== undefined) {
+    ReflectApply$LWS$1(AbortControllerProtoAbort$LWS, controller$LWS, []);
+    inflightControllers$LWS.delete(iframe$LWS);
+  }
+}
+function trackInflightPreflight$LWS(iframe$LWS, controller$LWS) {
+  inflightControllers$LWS.set(iframe$LWS, controller$LWS);
+}
+function clearInflightPreflight$LWS(iframe$LWS) {
+  inflightControllers$LWS.delete(iframe$LWS);
+}
+function poisonIframe$LWS(iframe$LWS) {
+  poisonedIframes$LWS.add(iframe$LWS);
+}
+function isPoisonedIframe$LWS(iframe$LWS) {
+  return poisonedIframes$LWS.has(iframe$LWS);
+}
+function rejectPathname$LWS(pathname$LWS) {
+  rejectedPathnames$LWS.add(pathname$LWS);
+}
+function isRejectedPathname$LWS(pathname$LWS) {
+  return rejectedPathnames$LWS.has(pathname$LWS);
+}
+function setDetachedPending$LWS(iframe$LWS, entry$LWS) {
+  detachedPending$LWS.set(iframe$LWS, entry$LWS);
+}
+function clearDetachedPending$LWS(iframe$LWS) {
+  detachedPending$LWS.delete(iframe$LWS);
+}
+function forEachDetachedPending$LWS(callback$LWS) {
+  detachedPending$LWS.forEach((entry$LWS, iframe$LWS) => {
+    callback$LWS(iframe$LWS, entry$LWS);
+  });
+}
+
+// Provenance: the W-22382462 same-origin async pre-flight pipeline added
+const {
+  isIframeSrcdocAttack: isIframeSrcdocAttack$LWS,
+  isXMLEntityAttack: isXMLEntityAttack$LWS,
+  isXMLNamespacedScriptAttack: isXMLNamespacedScriptAttack$LWS
+} = rootValidator$LWS;
 const ABOUT_BLANK_TOKEN$LWS = 'about:blank';
 const ALLOW_SAME_ORIGIN_TOKEN$LWS = 'allow-same-origin';
 const ALLOW_SCRIPTS_TOKEN$LWS = 'allow-scripts';
 const sameOriginSandboxedByLWS$LWS = toSafeWeakSet$LWS$1(new WeakSetCtor$LWS$1());
-function enforceSandboxAllowScriptsForSameOriginIframeRealm$LWS(iframe$LWS) {
+// W-22382462: connection observer for detached iframes with pending
+// same-origin URLs. The browser only fetches an iframe's src when the
+// iframe is connected to a document; setting src on a detached iframe
+// records the attribute but does not initiate any network activity
+// until attachment. The original pre-flight implementation skipped
+// detached iframes and wrote the native attribute eagerly, which left
+// a hole: a hostile URL set on a detached iframe and then attached
+// via `appendChild` would auto-fetch and parse before any LWS check
+// ran. The fix: defer both the native write AND the pre-flight until
+// the iframe is observed to enter a connected subtree, then run the
+// existing pre-flight pipeline at that moment. The native attribute
+// stays unwritten through the inspection window, so the browser never
+// auto-fetches a hostile body without our approval.
+//
+// One observer at module scope handles all detached-pending iframes
+// regardless of which sandbox set their src. The observer's callback
+// iterates the small detached-pending Map (typically empty or 1-2
+// entries) and dispatches the deferred pre-flight for any iframe
+// that is now connected. Lazy registration: the observer is wired up
+// the first time any setter parks a URL on a detached iframe, so
+// sandboxes that never use detached iframes pay no observer cost.
+let connectionObserverRegistered$LWS = false;
+function ensureConnectionObserverRegistered$LWS() {
+  if (connectionObserverRegistered$LWS) {
+    return;
+  }
+  connectionObserverRegistered$LWS = true;
+  const observer$LWS = new MutationObserverCtor$LWS(() => {
+    forEachDetachedPending$LWS((iframe$LWS, entry$LWS) => {
+      if (ReflectApply$LWS$1(NodeProtoIsConnectedGetter$LWS, iframe$LWS, [])) {
+        clearDetachedPending$LWS(iframe$LWS);
+        entry$LWS.runDeferredPreflight();
+      }
+    });
+  });
+  ReflectApply$LWS$1(MutationObserverProtoObserve$LWS, observer$LWS, [rootDocument$LWS, {
+    __proto__: null,
+    childList: true,
+    subtree: true
+  }]);
+}
+function enforceSandboxAllowScriptsForSameOriginIframeRealm$LWS(iframe$LWS, srcValueOverride$LWS) {
   const sandboxTokenList$LWS = ReflectApply$LWS$1(HTMLIFrameElementProtoSandboxGetter$LWS, iframe$LWS, []);
-  const srcValue$LWS = ReflectApply$LWS$1(HTMLIFrameElementProtoSrcGetter$LWS, iframe$LWS, []);
+  // Source of truth for the iframe's effective src, in priority order:
+  //   1. Explicit override from the caller (the pre-flight setter's
+  //      synchronous call passes the queued URL).
+  //   2. Pending URL from the registry-backed bookkeeping (any other
+  //      caller, e.g. iframe.sandbox = '...', running while a
+  //      pre-flight is in flight: the queued URL is the URL the
+  //      iframe will end up at when the pre-flight commits, so the
+  //      sandbox classification must reflect that, not the native
+  //      attribute store which is still empty).
+  //   3. The native src getter (fall-through; no pending state).
+  let srcValue$LWS;
+  if (srcValueOverride$LWS !== undefined) {
+    srcValue$LWS = srcValueOverride$LWS;
+  } else {
+    const pending$LWS = getPendingURL$LWS(iframe$LWS);
+    srcValue$LWS = pending$LWS !== undefined ? pending$LWS : ReflectApply$LWS$1(HTMLIFrameElementProtoSrcGetter$LWS, iframe$LWS, []);
+  }
   // Before adding "allow-scripts", check that "allow-same-origin" isn't present. If it is,
   // throw an exception because LWS cannot allow an iframe created by component code to
   // have sandbox="allow-same-origin allow-scripts", because that would enable access to
@@ -7969,7 +9056,7 @@ function enforceSandboxAllowScriptsForSameOriginIframeRealm$LWS(iframe$LWS) {
       if (!isSameOriginURL$LWS(srcValue$LWS)) {
         return;
       }
-    } catch (_unused2$LWS) {
+    } catch (_unused3$LWS) {
       /* empty */
     }
     if (!ReflectApply$LWS$1(DOMTokenListProtoContains$LWS, sandboxTokenList$LWS, [ALLOW_SCRIPTS_TOKEN$LWS])) {
@@ -7994,12 +9081,23 @@ function enforceSandboxAllowScriptsForSameOriginIframeRealm$LWS(iframe$LWS) {
 }
 function initDistortionHTMLIFrameElementSrcSetter$LWS({
   globalObject: {
-    HTMLIFrameElement: HTMLIFrameElement$LWS
+    HTMLIFrameElement: HTMLIFrameElement$LWS,
+    fetch: originalFetch$LWS
   }
 }) {
   const originalSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLIFrameElement$LWS.prototype, 'src');
   return function distortionHTMLIFrameElementSrcSetter$LWS(record$LWS) {
     function src$LWS(value$LWS) {
+      // If a prior async pre-flight on this iframe detected an
+      // attack-pattern in the fetched body, the iframe is permanently
+      // poisoned. Any subsequent synchronous write attempt throws,
+      // so the security violation surfaces at the call site of the
+      // FOLLOWING `iframe.src = ...` (or setAttribute('src',...) etc.)
+      // even though we cannot synchronously propagate the original
+      // hostile-detection back to its triggering setter call.
+      if (isGaterEnabledFeature$LWS('changesSince.264') && isPoisonedIframe$LWS(this)) {
+        throw new LockerSecurityError$LWS('HTMLIFrameElement is poisoned: a prior src assignment fetched a body containing an attack pattern. The iframe cannot be reused.');
+      }
       const normalizedSrcValue$LWS = toSafeStringValue$LWS(value$LWS);
       // This must be done on the raw value before sanitization, because sanitization can
       // remove the exploit pattern.
@@ -8024,12 +9122,208 @@ function initDistortionHTMLIFrameElementSrcSetter$LWS({
           throw new LockerSecurityError$LWS(`Cannot request disallowed endpoint: ${toSafeTemplateStringValue$LWS(normalizedURL$LWS)}`);
         }
       }
+      // Same-origin URLs go through an async pre-flight that fetches
+      // the resource and runs its body through the rootValidator
+      // attack-pattern checks. Any future-added pattern (XML entity
+      // smuggling, iframe-srcdoc script injection, namespaced-script
+      // payloads, etc.) is automatically picked up by virtue of going
+      // through the same validators every other HTML-handling
+      // distortion does. Same-origin guarantees the pre-flight body
+      // is byte-identical to what the iframe load would receive
+      // (attacker-controllable content surfaces in this threat model
+      // are deployable static resources, which serve identical bytes
+      // for every request). Cross-origin URLs proceed through the
+      // existing pipeline unchanged because the JS layer cannot
+      // inspect cross-origin response bodies and SOP already contains
+      // the cross-origin contentDocument.
+      //
+      // Detached iframes can't pre-flight at set-time (the browser
+      // hasn't queued any load), but they MUST NOT have their native
+      // src written eagerly either: the moment such an iframe is
+      // attached, the browser would auto-fetch and parse the body
+      // before any LWS check could run. Instead, the URL is parked
+      // in a detached-pending map and a connection observer dispatches
+      // the deferred pre-flight when the iframe enters a connected
+      // subtree. Native attribute stays unwritten until pre-flight
+      // resolves. Pending URL is recorded normally so read paths
+      // (iframe.src, getAttribute('src'), attributes['src'].value)
+      // surface what sandbox code wrote.
+      if (isGaterEnabledFeature$LWS('changesSince.264') && urlString$LWS !== '' && urlString$LWS !== ABOUT_BLANK_TOKEN$LWS && isSameOriginURL$LWS(urlString$LWS)) {
+        // Cross-iframe rejection cache: if any prior pre-flight
+        // (on this iframe or any other) detected an attack
+        // pattern at this URL's pathname, refuse the assignment
+        // synchronously without re-fetching. Runs regardless of
+        // attached/detached state — a known-hostile pathname
+        // is rejected at the call site.
+        const parsedURL$LWS = parseURL$LWS(urlString$LWS);
+        if (isRejectedPathname$LWS(parsedURL$LWS.pathname)) {
+          throw new LockerSecurityError$LWS(`Cannot set src to "${toSafeTemplateStringValue$LWS(urlString$LWS)}": pathname previously rejected as containing an attack pattern.`);
+        }
+        if (ReflectApply$LWS$1(NodeProtoIsConnectedGetter$LWS, this, [])) {
+          preflightSameOriginAndCommit$LWS(this, urlString$LWS, parsedURL$LWS.pathname, record$LWS);
+          // Sandbox enforcement is deferred to onSafe so that
+          // navigation occurs with the iframe's original sandbox
+          // state. Adding `allow-scripts` synchronously here would
+          // mark the iframe `sandbox="allow-scripts"` (without
+          // `allow-same-origin`) at navigation time, which per
+          // spec yields an opaque cross-origin browsing context
+          // even for same-origin URLs. onSafe runs the helper
+          // after the native src setter, matching the
+          // legacy-path order where the iframe navigates with the
+          // pre-existing sandbox state and `allow-scripts` is
+          // added afterward.
+          return;
+        }
+        // Detached: write native and run sandbox enforcement
+        // synchronously (preserves the legacy-path
+        // `setAttributeNodeNS` Attr-replacement semantics and
+        // the synchronous read of `iframe.sandbox` after
+        // `iframe.src = ...`). Then park the URL and register
+        // the connection observer. When the iframe is later
+        // attached, the observer reads the native src, clears
+        // it (which aborts the browser's queued navigation per
+        // HTML spec — changing src during a navigate aborts
+        // the in-flight load), and runs the deferred
+        // pre-flight. On safe, native src is written back and
+        // the browser navigates. On hostile, native stays
+        // cleared and the iframe is poisoned.
+        //
+        // The native write is safe while detached: the browser
+        // does not navigate iframes that are not connected to
+        // a document, so no fetch occurs until attachment, at
+        // which point our observer interposes before the
+        // browser's load task runs.
+        const iframe$LWS = this;
+        ReflectApply$LWS$1(HTMLIFrameElementProtoSrcSetter$LWS, iframe$LWS, [urlString$LWS]);
+        if (isGaterEnabledFeature$LWS(ENABLE_SANDBOXED_SAMEORIGIN_IFRAME_GATE$LWS) && isNotAllowedToOverrideGaterEnabledFeature$LWS(record$LWS.key, ENABLE_SANDBOXED_SAMEORIGIN_IFRAME_GATE$LWS)) {
+          enforceSandboxAllowScriptsForSameOriginIframeRealm$LWS(iframe$LWS);
+        }
+        setDetachedPending$LWS(iframe$LWS, {
+          url: urlString$LWS,
+          pathname: parsedURL$LWS.pathname,
+          runDeferredPreflight: () => {
+            // Clear the native src to abort the navigation
+            // the browser queued at attach time. HTML spec:
+            // when src changes during a navigation, the
+            // prior navigation is aborted. After clearing,
+            // the pre-flight runs against the saved URL
+            // and writes native back on safe.
+            ReflectApply$LWS$1(ElementProtoRemoveAttribute$LWS, iframe$LWS, ['src']);
+            preflightSameOriginAndCommit$LWS(iframe$LWS, urlString$LWS, parsedURL$LWS.pathname, record$LWS);
+          }
+        });
+        ensureConnectionObserverRegistered$LWS();
+        return;
+      }
+      // Any non-pre-flight write (cross-origin, empty, about:blank,
+      // or pre-264) supersedes a pending pre-flight: abort it,
+      // clear pending state, then write native. This guarantees
+      // the helper below sees the actual post-write native src
+      // (not a stale pending URL from the prior assignment).
+      abortInflightPreflight$LWS(this);
+      clearPendingURL$LWS(this);
+      clearDetachedPending$LWS(this);
+      clearInflightPreflight$LWS(this);
       ReflectApply$LWS$1(HTMLIFrameElementProtoSrcSetter$LWS, this, [urlString$LWS]);
       if (isGaterEnabledFeature$LWS(ENABLE_SANDBOXED_SAMEORIGIN_IFRAME_GATE$LWS) && isNotAllowedToOverrideGaterEnabledFeature$LWS(record$LWS.key, ENABLE_SANDBOXED_SAMEORIGIN_IFRAME_GATE$LWS)) {
         enforceSandboxAllowScriptsForSameOriginIframeRealm$LWS(this);
       }
     }
-    registerAttributeDistortion$LWS(record$LWS, HTMLIFrameElement$LWS, 'src', NAMESPACE_DEFAULT$LWS, src$LWS);
+    // Same-origin async pre-flight pipeline. The setter remains
+    // synchronous from sandboxed code's perspective: it returns after
+    // recording the pending URL and kicking off the fetch. The native
+    // attribute is NOT written until the pre-flight approves the body,
+    // so the browser does not start navigating until then. Read-after-
+    // write surfaces (iframe.src, getAttribute('src'), attributes['src']
+    // via the iframe.src getter distortion + read-side getter registry)
+    // see the pending URL during the inspection window.
+    function preflightSameOriginAndCommit$LWS(iframe$LWS, urlString$LWS, pathname$LWS, sandboxRecord$LWS) {
+      // Re-assignment cancels any prior pre-flight in flight on this
+      // iframe and replaces it with the new URL.
+      abortInflightPreflight$LWS(iframe$LWS);
+      setPendingURL$LWS(iframe$LWS, urlString$LWS);
+      const controller$LWS = new AbortControllerCtor$LWS();
+      const signal$LWS = ReflectApply$LWS$1(AbortControllerProtoSignalGetter$LWS, controller$LWS, []);
+      trackInflightPreflight$LWS(iframe$LWS, controller$LWS);
+      const isSupersededOrAborted$LWS = () => signal$LWS.aborted;
+      const onSafe$LWS = () => {
+        if (isSupersededOrAborted$LWS()) {
+          return;
+        }
+        clearPendingURL$LWS(iframe$LWS);
+        clearInflightPreflight$LWS(iframe$LWS);
+        ReflectApply$LWS$1(HTMLIFrameElementProtoSrcSetter$LWS, iframe$LWS, [urlString$LWS]);
+        if (isGaterEnabledFeature$LWS(ENABLE_SANDBOXED_SAMEORIGIN_IFRAME_GATE$LWS) && isNotAllowedToOverrideGaterEnabledFeature$LWS(sandboxRecord$LWS.key, ENABLE_SANDBOXED_SAMEORIGIN_IFRAME_GATE$LWS)) {
+          enforceSandboxAllowScriptsForSameOriginIframeRealm$LWS(iframe$LWS);
+        }
+      };
+      const onHostile$LWS = () => {
+        if (isSupersededOrAborted$LWS()) {
+          return;
+        }
+        clearPendingURL$LWS(iframe$LWS);
+        clearInflightPreflight$LWS(iframe$LWS);
+        // Native src is intentionally left unwritten; the iframe
+        // never navigates to the hostile URL. Mark the iframe as
+        // poisoned so the next synchronous write attempt throws.
+        // The original iframe.src = url callsite returned long
+        // ago; we cannot synchronously propagate the throw back
+        // to it, but any subsequent setter / setAttribute / etc.
+        // on this iframe will throw at the new call site.
+        poisonIframe$LWS(iframe$LWS);
+        // Add the pathname to the cross-iframe rejection cache
+        // so any future iframe whose src lands at the same
+        // pathname throws synchronously at setter entry without
+        // re-fetching. Pathname-keyed (not full URL) so query-
+        // string rotation can't evade the cache.
+        rejectPathname$LWS(pathname$LWS);
+      };
+      const onAborted$LWS = () => {
+        clearInflightPreflight$LWS(iframe$LWS);
+      };
+      ReflectApply$LWS$1(originalFetch$LWS, undefined, [urlString$LWS, {
+        __proto__: null,
+        credentials: 'same-origin',
+        signal: signal$LWS
+      }]).then(response$LWS => response$LWS.text()).then(body$LWS => {
+        if (isSupersededOrAborted$LWS()) {
+          onAborted$LWS();
+          return;
+        }
+        // Validator union scoped to the patterns that
+        // matter for iframe.src bodies: iframe+srcdoc
+        // substring combo (a child iframe with srcdoc
+        // smuggled into the parent page), XML DOCTYPE
+        // entity expansion (XXE), and XML-namespaced
+        // script elements that execute in XML contexts
+        // but are inert in HTML. The broader
+        // `isIframeSrcdocScriptAttack` (which also flags
+        // any obfuscated <script>) is intentionally NOT
+        // used here — existing test fixtures and component
+        // code rely on iframe.src loading <script>-bearing
+        // same-origin pages (legacy contract; the iframe
+        // sandbox is the layer that contains script
+        // execution). Tightening this would break that
+        // contract.
+        if (isIframeSrcdocAttack$LWS(body$LWS) || isXMLEntityAttack$LWS(body$LWS) || isXMLNamespacedScriptAttack$LWS(body$LWS)) {
+          onHostile$LWS();
+        } else {
+          onSafe$LWS();
+        }
+      }).catch(() => {
+        if (isSupersededOrAborted$LWS()) {
+          onAborted$LWS();
+          return;
+        }
+        // Network error or non-2xx. The browser's own iframe
+        // load would also fail; commit the URL so the iframe's
+        // onerror fires through the normal navigation-failure
+        // path. (We deliberately don't poison on transport
+        // errors — only on attack-pattern detection.)
+        onSafe$LWS();
+      });
+    }
+    registerAttributeSetterDistortion$LWS(record$LWS, HTMLIFrameElement$LWS, 'src', NAMESPACE_DEFAULT$LWS, src$LWS);
     return [originalSrcSetter$LWS, src$LWS];
   };
 }
@@ -8046,10 +9340,88 @@ function initDistortionHTMLIFrameElementSandboxSetter$LWS({
         enforceSandboxAllowScriptsForSameOriginIframeRealm$LWS(this);
       }
     }
-    registerAttributeDistortion$LWS(record$LWS, HTMLIFrameElement$LWS, 'sandbox', NAMESPACE_DEFAULT$LWS, sandbox$LWS);
+    registerAttributeSetterDistortion$LWS(record$LWS, HTMLIFrameElement$LWS, 'sandbox', NAMESPACE_DEFAULT$LWS, sandbox$LWS);
     return [originalSandboxSetter$LWS, sandbox$LWS];
   };
 }
+
+// HTMLIFrameElement.src getter distortion. Returns the pending URL recorded
+// by the src setter's pre-flight pipeline (see src-setter.ts) when one
+// exists, otherwise falls through to the native getter.
+//
+// The same getter is registered into the read-side attribute getter
+// registry under (HTMLIFrameElement, 'src'), so el.getAttribute('src'),
+// el.getAttributeNS, el.attributes['src'].value, etc. all surface the
+// pending URL through the registry consultation in those distortions.
+function initDistortionHTMLIFrameElementSrcGetter$LWS({
+  globalObject: {
+    HTMLIFrameElement: HTMLIFrameElement$LWS
+  }
+}) {
+  const originalSrcGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLIFrameElement$LWS.prototype, 'src');
+  return function distortionHTMLIFrameElementSrcGetter$LWS(record$LWS) {
+    function src$LWS() {
+      if (isGaterEnabledFeature$LWS('changesSince.264')) {
+        const pending$LWS = getPendingURL$LWS(this);
+        if (pending$LWS !== undefined) {
+          return pending$LWS;
+        }
+      }
+      return ReflectApply$LWS$1(originalSrcGetter$LWS, this, []);
+    }
+    // The pending-URL pipeline that backs this getter is W-22382462
+    // gate-264 work; only register into the read-side attribute
+    // getter registry when the gate is on, otherwise pre-264
+    // sandboxes pay the registry-consultation cost on every
+    // iframe.src read with no behavior change to show for it.
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      registerAttributeGetterDistortion$LWS(record$LWS, HTMLIFrameElement$LWS, 'src', NAMESPACE_DEFAULT$LWS, src$LWS);
+    }
+    return [originalSrcGetter$LWS, src$LWS];
+  };
+}
+function initDistortionHTMLImageElementSrcSetter$LWS({
+  globalObject: {
+    HTMLImageElement: HTMLImageElement$LWS
+  }
+}) {
+  const originalSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLImageElement$LWS.prototype, 'src');
+  return function distortionHTMLImageElementSrcSetter$LWS(record$LWS) {
+    function src$LWS(value$LWS) {
+      const normalized$LWS = toSafeStringValue$LWS(value$LWS);
+      const urlString$LWS = normalized$LWS === '' ? '' : sanitizeURLForElement$LWS(normalized$LWS);
+      if (urlString$LWS !== '' && isGaterEnabledFeature$LWS('changesSince.264')) {
+        const parsedURL$LWS = parseURL$LWS(urlString$LWS);
+        if (!isAllowedEndpointURL$LWS(parsedURL$LWS)) {
+          throw new LockerSecurityError$LWS(`Cannot request disallowed endpoint: ${toSafeTemplateStringValue$LWS(parsedURL$LWS.normalizedURL)}`);
+        }
+      }
+      ReflectApply$LWS$1(HTMLImageElementProtoSrcSetter$LWS, this, [urlString$LWS]);
+    }
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLImageElement$LWS, 'src', NAMESPACE_DEFAULT$LWS, src$LWS);
+    }
+    return [originalSrcSetter$LWS, src$LWS];
+  };
+}
+function initDistortionHTMLImageElementSrcsetSetter$LWS({
+  globalObject: {
+    HTMLImageElement: HTMLImageElement$LWS
+  }
+}) {
+  const originalSrcsetSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLImageElement$LWS.prototype, 'srcset');
+  return function distortionHTMLImageElementSrcsetSetter$LWS(record$LWS) {
+    function srcset$LWS(value$LWS) {
+      const normalized$LWS = toSafeStringValue$LWS(value$LWS);
+      const finalValue$LWS = normalized$LWS !== '' && isGaterEnabledFeature$LWS('changesSince.264') ? sanitizeSrcsetAndValidateEndpoints$LWS(normalized$LWS) : normalized$LWS;
+      ReflectApply$LWS$1(HTMLImageElementProtoSrcsetSetter$LWS, this, [finalValue$LWS]);
+    }
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLImageElement$LWS, 'srcset', NAMESPACE_DEFAULT$LWS, srcset$LWS);
+    }
+    return [originalSrcsetSetter$LWS, srcset$LWS];
+  };
+}
 function initDistortionHTMLInputElementFormActionSetter$LWS({
   globalObject: {
     HTMLInputElement: HTMLInputElement$LWS
@@ -8073,13 +9445,42 @@ function initDistortionHTMLInputElementFormActionSetter$LWS({
         }
         ReflectApply$LWS$1(HTMLInputElementProtoFormActionSetter$LWS, this, [urlString$LWS]);
       }
-      registerAttributeDistortion$LWS(record$LWS, HTMLInputElement$LWS, 'formaction', NAMESPACE_DEFAULT$LWS, formAction$LWS);
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLInputElement$LWS, 'formaction', NAMESPACE_DEFAULT$LWS, formAction$LWS);
       return [originalFormActionSetter$LWS, formAction$LWS];
     }
     // istanbul ignore next: ungated return is not reachable in coverage runs
     return [originalFormActionSetter$LWS, originalFormActionSetter$LWS];
   };
 }
+
+// Uniform guard: applied regardless of the `rel` value. A conditional check
+// (guarded only on fetch-triggering rel values) is unsafe because the attacker
+// can set href with an innocuous rel and then flip rel to "preload" to kick
+// off the request later.
+function initDistortionHTMLLinkElementHrefSetter$LWS({
+  globalObject: {
+    HTMLLinkElement: HTMLLinkElement$LWS
+  }
+}) {
+  const originalHrefSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLLinkElement$LWS.prototype, 'href');
+  return function distortionHTMLLinkElementHrefSetter$LWS(record$LWS) {
+    function href$LWS(value$LWS) {
+      const normalized$LWS = toSafeStringValue$LWS(value$LWS);
+      const urlString$LWS = normalized$LWS === '' ? '' : sanitizeURLForElement$LWS(normalized$LWS);
+      if (urlString$LWS !== '' && isGaterEnabledFeature$LWS('changesSince.264')) {
+        const parsedURL$LWS = parseURL$LWS(urlString$LWS);
+        if (!isAllowedEndpointURL$LWS(parsedURL$LWS)) {
+          throw new LockerSecurityError$LWS(`Cannot request disallowed endpoint: ${toSafeTemplateStringValue$LWS(parsedURL$LWS.normalizedURL)}`);
+        }
+      }
+      ReflectApply$LWS$1(HTMLLinkElementProtoHrefSetter$LWS, this, [urlString$LWS]);
+    }
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLLinkElement$LWS, 'href', NAMESPACE_DEFAULT$LWS, href$LWS);
+    }
+    return [originalHrefSetter$LWS, href$LWS];
+  };
+}
 const importRegExp$LWS = /import/i;
 const WARN_MESSAGE$LWS = 'Lightning Web Security: HTMLLinkElement does not allow setting "rel" property to "import" value.';
 function isValidRelValue$LWS(value$LWS) {
@@ -8101,7 +9502,7 @@ function initDistortionHTMLLinkElementRelSetter$LWS({
   }
   const distortionEntry$LWS = [originalRelSetter$LWS, rel$LWS];
   return function distortionHTMLLinkElementRelSetter$LWS(record$LWS) {
-    registerAttributeDistortion$LWS(record$LWS, HTMLLinkElement$LWS, 'rel', NAMESPACE_DEFAULT$LWS, rel$LWS);
+    registerAttributeSetterDistortion$LWS(record$LWS, HTMLLinkElement$LWS, 'rel', NAMESPACE_DEFAULT$LWS, rel$LWS);
     return distortionEntry$LWS;
   };
 }
@@ -8118,37 +9519,124 @@ function initDistortionHTMLLinkElementRelListSetter$LWS({
       ReflectApply$LWS$1(originalRelListSetter$LWS, this, [string$LWS]);
       return;
     }
-    consoleWarn$LWS(WARN_MESSAGE$LWS);
+    consoleWarn$LWS(WARN_MESSAGE$LWS);
+  }];
+  return function distortionHTMLLinkElementRelListSetter$LWS() {
+    return distortionEntry$LWS;
+  };
+}
+function initDistortionHTMLMediaElementSrcSetter$LWS({
+  globalObject: {
+    HTMLMediaElement: HTMLMediaElement$LWS
+  }
+}) {
+  const originalSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLMediaElement$LWS.prototype, 'src');
+  return function distortionHTMLMediaElementSrcSetter$LWS(record$LWS) {
+    function src$LWS(value$LWS) {
+      const normalized$LWS = toSafeStringValue$LWS(value$LWS);
+      const urlString$LWS = normalized$LWS === '' ? '' : sanitizeURLForElement$LWS(normalized$LWS);
+      if (urlString$LWS !== '' && isGaterEnabledFeature$LWS('changesSince.264')) {
+        const parsedURL$LWS = parseURL$LWS(urlString$LWS);
+        if (!isAllowedEndpointURL$LWS(parsedURL$LWS)) {
+          throw new LockerSecurityError$LWS(`Cannot request disallowed endpoint: ${toSafeTemplateStringValue$LWS(parsedURL$LWS.normalizedURL)}`);
+        }
+      }
+      ReflectApply$LWS$1(HTMLMediaElementProtoSrcSetter$LWS, this, [urlString$LWS]);
+    }
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLMediaElement$LWS, 'src', NAMESPACE_DEFAULT$LWS, src$LWS);
+    }
+    return [originalSrcSetter$LWS, src$LWS];
+  };
+}
+function initDistortionHTMLMetaElementContentGetter$LWS({
+  globalObject: {
+    HTMLMetaElement: HTMLMetaElement$LWS
+  }
+}) {
+  const originalContentGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLMetaElement$LWS.prototype, 'content');
+  const distortionEntry$LWS = [originalContentGetter$LWS, function content$LWS() {
+    const originalContent$LWS = ReflectApply$LWS$1(originalContentGetter$LWS, this, []);
+    if (isGaterEnabledFeature$LWS('changesSince.262')) {
+      return removeNoncePatterns$LWS(originalContent$LWS);
+    }
+    // istanbul ignore next: ungated return is not reachable in coverage runs
+    return originalContent$LWS;
+  }];
+  return function distortionHTMLMetaElementContentGetter$LWS() {
+    return distortionEntry$LWS;
+  };
+}
+function initDistortionHTMLObjectElementContentDocumentGetter$LWS({
+  globalObject: {
+    HTMLObjectElement: HTMLObjectElement$LWS
+  }
+}) {
+  const originalContentDocumentGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLObjectElement$LWS.prototype, 'contentDocument');
+  const distortionEntry$LWS = [originalContentDocumentGetter$LWS, function contentDocument$LWS() {
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      // The <object> element has no sandbox attribute, so its embedded
+      // document runs with full privileges of the parent origin.
+      // Block access to prevent sandbox bypass.
+      return null;
+    }
+    // istanbul ignore next: this line is untested because tests are run with all gates enabled.
+    return ReflectApply$LWS$1(originalContentDocumentGetter$LWS, this, []);
   }];
-  return function distortionHTMLLinkElementRelListSetter$LWS() {
+  return function distortionHTMLObjectElementContentDocumentGetter$LWS() {
     return distortionEntry$LWS;
   };
 }
-function initDistortionHTMLMetaElementContentGetter$LWS({
+function initDistortionHTMLObjectElementContentWindowGetter$LWS({
   globalObject: {
-    HTMLMetaElement: HTMLMetaElement$LWS
+    HTMLObjectElement: HTMLObjectElement$LWS
   }
 }) {
-  const originalContentGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLMetaElement$LWS.prototype, 'content');
-  const distortionEntry$LWS = [originalContentGetter$LWS, function content$LWS() {
-    const originalContent$LWS = ReflectApply$LWS$1(originalContentGetter$LWS, this, []);
-    if (isGaterEnabledFeature$LWS('changesSince.262')) {
-      return removeNoncePatterns$LWS(originalContent$LWS);
+  const originalContentWindowGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLObjectElement$LWS.prototype, 'contentWindow');
+  const distortionEntry$LWS = [originalContentWindowGetter$LWS, function contentWindow$LWS() {
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      // The <object> element has no sandbox attribute, so its embedded
+      // document runs with full privileges of the parent origin.
+      // Block access to prevent sandbox bypass.
+      return null;
     }
-    // istanbul ignore next: ungated return is not reachable in coverage runs
-    return originalContent$LWS;
+    // istanbul ignore next: this line is untested because tests are run with all gates enabled.
+    return ReflectApply$LWS$1(originalContentWindowGetter$LWS, this, []);
   }];
-  return function distortionHTMLMetaElementContentGetter$LWS() {
+  return function distortionHTMLObjectElementContentWindowGetter$LWS() {
     return distortionEntry$LWS;
   };
 }
+
+// MIME types that create a browsing context when used with <object>.
+// Must match the list in type-setter.ts.
+const BLOCKED_OBJECT_MIME_TYPES$1$LWS = ['text/html', 'application/xhtml+xml'];
+const ABOUT_BLANK$LWS = 'about:blank';
 function initDistortionHTMLObjectElementDataSetter$LWS({
   globalObject: {
     HTMLObjectElement: HTMLObjectElement$LWS
   }
 }) {
   const originalDataSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLObjectElement$LWS.prototype, 'data');
+  const originalTypeGetter$LWS = ObjectLookupOwnGetter$LWS$1(HTMLObjectElement$LWS.prototype, 'type');
   function data$LWS(value$LWS) {
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      const currentType$LWS = ReflectApply$LWS$1(originalTypeGetter$LWS, this, []);
+      const loweredType$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, currentType$LWS, []);
+      // Strip MIME parameters before checking (e.g. "text/html;charset=utf-8" → "text/html").
+      const semicolonIndex$LWS = ReflectApply$LWS$1(StringProtoIndexOf$LWS, loweredType$LWS, [';']);
+      const mimeType$LWS = semicolonIndex$LWS === -1 ? loweredType$LWS : ReflectApply$LWS$1(StringProtoTrim$LWS, ReflectApply$LWS$1(StringProtoSlice$LWS$1, loweredType$LWS, [0, semicolonIndex$LWS]), []);
+      // Block if type is explicitly an HTML MIME type.
+      if (BLOCKED_OBJECT_MIME_TYPES$1$LWS.includes(mimeType$LWS)) {
+        throw new LockerSecurityError$LWS('HTMLObjectElement.data cannot be set when type is ' + `"${mimeType$LWS}". HTML content types create an unsandboxed browsing context.`);
+      }
+      // Block if type is empty/absent — the browser will sniff the response
+      // Content-Type, and if it's HTML the embedded document executes scripts
+      // unsandboxed. Only about:blank is safe (empty document, no scripts).
+      if (mimeType$LWS === '' && `${value$LWS}` !== ABOUT_BLANK$LWS) {
+        throw new LockerSecurityError$LWS('HTMLObjectElement.data requires an explicit non-HTML type attribute. ' + 'Without a type, the browser may infer text/html from the response ' + 'and create an unsandboxed browsing context.');
+      }
+    }
     const urlString$LWS = sanitizeURLForElement$LWS(value$LWS);
     if (!isValidURLScheme$LWS(urlString$LWS)) {
       throw new LockerSecurityError$LWS('HTMLObjectElement.data supports http://, https:// schemes, relative urls and about:blank.');
@@ -8161,7 +9649,38 @@ function initDistortionHTMLObjectElementDataSetter$LWS({
   }
   const distortionEntry$LWS = [originalDataSetter$LWS, data$LWS];
   return function distortionHTMLObjectElementDataSetter$LWS(record$LWS) {
-    registerAttributeDistortion$LWS(record$LWS, HTMLObjectElement$LWS, 'data', NAMESPACE_DEFAULT$LWS, data$LWS);
+    registerAttributeSetterDistortion$LWS(record$LWS, HTMLObjectElement$LWS, 'data', NAMESPACE_DEFAULT$LWS, data$LWS);
+    return distortionEntry$LWS;
+  };
+}
+
+// MIME types that create a browsing context when used with <object>.
+// An embedded browsing context executes scripts with full privileges of the
+// parent origin — bypassing all LWS sandbox distortions.
+const BLOCKED_OBJECT_MIME_TYPES$LWS = ['text/html', 'application/xhtml+xml'];
+function initDistortionHTMLObjectElementTypeSetter$LWS({
+  globalObject: {
+    HTMLObjectElement: HTMLObjectElement$LWS
+  }
+}) {
+  const originalTypeSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLObjectElement$LWS.prototype, 'type');
+  function type$LWS(value$LWS) {
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      const stringValue$LWS = `${value$LWS}`;
+      const lowered$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, stringValue$LWS, []);
+      // Strip MIME parameters (e.g. "text/html;charset=utf-8" → "text/html").
+      // Per RFC 2045 §5.1, parameters follow `;`. We check the type/subtype prefix.
+      const semicolonIndex$LWS = ReflectApply$LWS$1(StringProtoIndexOf$LWS, lowered$LWS, [';']);
+      const mimeType$LWS = semicolonIndex$LWS === -1 ? lowered$LWS : ReflectApply$LWS$1(StringProtoTrim$LWS, ReflectApply$LWS$1(StringProtoSlice$LWS$1, lowered$LWS, [0, semicolonIndex$LWS]), []);
+      if (BLOCKED_OBJECT_MIME_TYPES$LWS.includes(mimeType$LWS)) {
+        throw new LockerSecurityError$LWS(`HTMLObjectElement.type cannot be set to "${mimeType$LWS}". ` + 'HTML content types create an unsandboxed browsing context.');
+      }
+    }
+    ReflectApply$LWS$1(originalTypeSetter$LWS, this, [value$LWS]);
+  }
+  const distortionEntry$LWS = [originalTypeSetter$LWS, type$LWS];
+  return function distortionHTMLObjectElementTypeSetter$LWS(record$LWS) {
+    registerAttributeSetterDistortion$LWS(record$LWS, HTMLObjectElement$LWS, 'type', NAMESPACE_DEFAULT$LWS, type$LWS);
     return distortionEntry$LWS;
   };
 }
@@ -8230,7 +9749,7 @@ function initDistortionHTMLScriptElementInnerTextSetter$LWS({
   };
 }
 const descriptorCaches$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
-function createBlockedAttributeDistortionFactoryInitializer$LWS(Ctor$LWS, ctorName$LWS, attributeName$LWS) {
+function createBlockedAttributeSetterDistortionFactoryInitializer$LWS(Ctor$LWS, ctorName$LWS, attributeName$LWS) {
   return function initDistortionBlockedAttribute$LWS() {
     const enquotedAttributeName$LWS = enquote$LWS(attributeName$LWS);
     const distortionName$LWS = `blocked${capitalizeFirstChar$LWS(attributeName$LWS)}Attribute`;
@@ -8244,7 +9763,7 @@ function createBlockedAttributeDistortionFactoryInitializer$LWS(Ctor$LWS, ctorNa
       }
     };
     return function distortionBlockedAttribute$LWS(record$LWS) {
-      registerAttributeDistortion$LWS(record$LWS, Ctor$LWS, attributeName$LWS, NAMESPACE_DEFAULT$LWS, distortion$LWS);
+      registerAttributeSetterDistortion$LWS(record$LWS, Ctor$LWS, attributeName$LWS, NAMESPACE_DEFAULT$LWS, distortion$LWS);
     };
   };
 }
@@ -8289,14 +9808,48 @@ function createValueThrowerFactoryInitializer$LWS(proto$LWS, key$LWS) {
     return valueThrowerDistortionFactory$LWS;
   };
 }
-function addBlockedAttributeDistortionFactoryInitializers$LWS(Ctor$LWS, ctorName$LWS, attributes$LWS, factoryInitializers$LWS) {
+function addBlockedAttributeSetterDistortionFactoryInitializers$LWS(Ctor$LWS, ctorName$LWS, attributes$LWS, factoryInitializers$LWS) {
+  let {
+    length: factoryInitializersOffset$LWS
+  } = factoryInitializers$LWS;
+  for (let i$LWS = 0, {
+      length: length$LWS
+    } = attributes$LWS; i$LWS < length$LWS; i$LWS += 1) {
+    factoryInitializers$LWS[factoryInitializersOffset$LWS++] = createBlockedAttributeSetterDistortionFactoryInitializer$LWS(Ctor$LWS, ctorName$LWS, attributes$LWS[i$LWS]);
+  }
+}
+// Read-side counterpart of createBlockedAttributeSetterDistortionFactoryInitializer:
+// produce a factory that registers a thrower in the read-side getter registry
+// for `(Ctor, attributeName)`. When sandboxed code reads the attribute via any
+// of the distortion-covered read paths (Element.getAttribute family,
+// NamedNodeMap.getNamedItem family, Attr.value getter), the registered thrower
+// fires and refuses the read.
+function createBlockedAttributeGetterDistortionFactoryInitializer$LWS(Ctor$LWS, attributeName$LWS) {
+  return function initDistortionBlockedAttributeGetter$LWS() {
+    const enquotedAttributeName$LWS = enquote$LWS(attributeName$LWS);
+    const distortionName$LWS = `blocked${capitalizeFirstChar$LWS(attributeName$LWS)}AttributeGetter`;
+    const {
+      [distortionName$LWS]: thrower$LWS
+    } = {
+      [distortionName$LWS]: () => {
+        // Match the message used by the previous blockAccessToNonce
+        // inline call so existing assertions remain valid.
+        throw new LockerSecurityError$LWS(`Attribute ${enquotedAttributeName$LWS} not accessible`);
+      }
+    };
+    return function distortionBlockedAttributeGetter$LWS(record$LWS) {
+      registerAttributeGetterDistortion$LWS(record$LWS, Ctor$LWS, attributeName$LWS, NAMESPACE_DEFAULT$LWS, thrower$LWS);
+    };
+  };
+}
+function addBlockedAttributeGetterDistortionFactoryInitializers$LWS(Ctor$LWS, attributes$LWS, factoryInitializers$LWS) {
   let {
     length: factoryInitializersOffset$LWS
   } = factoryInitializers$LWS;
   for (let i$LWS = 0, {
       length: length$LWS
     } = attributes$LWS; i$LWS < length$LWS; i$LWS += 1) {
-    factoryInitializers$LWS[factoryInitializersOffset$LWS++] = createBlockedAttributeDistortionFactoryInitializer$LWS(Ctor$LWS, ctorName$LWS, attributes$LWS[i$LWS]);
+    factoryInitializers$LWS[factoryInitializersOffset$LWS++] = createBlockedAttributeGetterDistortionFactoryInitializer$LWS(Ctor$LWS, attributes$LWS[i$LWS]);
   }
 }
 function addBlockedPropertyDistortionFactoryInitializers$LWS({
@@ -8437,7 +9990,7 @@ function initDistortionHTMLScriptElementSrcSetter$LWS({
   } = ReflectGetOwnPropertyDescriptor$LWS(HTMLScriptElement$LWS.prototype, 'src');
   return function distortionHTMLScriptElementSrcSetter$LWS(record$LWS) {
     const src$LWS = createScriptDistortion$LWS(record$LWS, 'src');
-    registerAttributeDistortion$LWS(record$LWS, HTMLScriptElement$LWS, 'src', NAMESPACE_DEFAULT$LWS, src$LWS);
+    registerAttributeSetterDistortion$LWS(record$LWS, HTMLScriptElement$LWS, 'src', NAMESPACE_DEFAULT$LWS, src$LWS);
     return [originalSrcSetter$LWS, src$LWS];
   };
 }
@@ -8552,6 +10105,72 @@ function initDistortionHTMLScriptElementTextContentSetter$LWS({
     }];
   };
 }
+function initDistortionHTMLSourceElementSrcSetter$LWS({
+  globalObject: {
+    HTMLSourceElement: HTMLSourceElement$LWS
+  }
+}) {
+  const originalSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLSourceElement$LWS.prototype, 'src');
+  return function distortionHTMLSourceElementSrcSetter$LWS(record$LWS) {
+    function src$LWS(value$LWS) {
+      const normalized$LWS = toSafeStringValue$LWS(value$LWS);
+      const urlString$LWS = normalized$LWS === '' ? '' : sanitizeURLForElement$LWS(normalized$LWS);
+      if (urlString$LWS !== '' && isGaterEnabledFeature$LWS('changesSince.264')) {
+        const parsedURL$LWS = parseURL$LWS(urlString$LWS);
+        if (!isAllowedEndpointURL$LWS(parsedURL$LWS)) {
+          throw new LockerSecurityError$LWS(`Cannot request disallowed endpoint: ${toSafeTemplateStringValue$LWS(parsedURL$LWS.normalizedURL)}`);
+        }
+      }
+      ReflectApply$LWS$1(HTMLSourceElementProtoSrcSetter$LWS, this, [urlString$LWS]);
+    }
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLSourceElement$LWS, 'src', NAMESPACE_DEFAULT$LWS, src$LWS);
+    }
+    return [originalSrcSetter$LWS, src$LWS];
+  };
+}
+function initDistortionHTMLSourceElementSrcsetSetter$LWS({
+  globalObject: {
+    HTMLSourceElement: HTMLSourceElement$LWS
+  }
+}) {
+  const originalSrcsetSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLSourceElement$LWS.prototype, 'srcset');
+  return function distortionHTMLSourceElementSrcsetSetter$LWS(record$LWS) {
+    function srcset$LWS(value$LWS) {
+      const normalized$LWS = toSafeStringValue$LWS(value$LWS);
+      const finalValue$LWS = normalized$LWS !== '' && isGaterEnabledFeature$LWS('changesSince.264') ? sanitizeSrcsetAndValidateEndpoints$LWS(normalized$LWS) : normalized$LWS;
+      ReflectApply$LWS$1(HTMLSourceElementProtoSrcsetSetter$LWS, this, [finalValue$LWS]);
+    }
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLSourceElement$LWS, 'srcset', NAMESPACE_DEFAULT$LWS, srcset$LWS);
+    }
+    return [originalSrcsetSetter$LWS, srcset$LWS];
+  };
+}
+function initDistortionHTMLTrackElementSrcSetter$LWS({
+  globalObject: {
+    HTMLTrackElement: HTMLTrackElement$LWS
+  }
+}) {
+  const originalSrcSetter$LWS = ObjectLookupOwnSetter$LWS(HTMLTrackElement$LWS.prototype, 'src');
+  return function distortionHTMLTrackElementSrcSetter$LWS(record$LWS) {
+    function src$LWS(value$LWS) {
+      const normalized$LWS = toSafeStringValue$LWS(value$LWS);
+      const urlString$LWS = normalized$LWS === '' ? '' : sanitizeURLForElement$LWS(normalized$LWS);
+      if (urlString$LWS !== '' && isGaterEnabledFeature$LWS('changesSince.264')) {
+        const parsedURL$LWS = parseURL$LWS(urlString$LWS);
+        if (!isAllowedEndpointURL$LWS(parsedURL$LWS)) {
+          throw new LockerSecurityError$LWS(`Cannot request disallowed endpoint: ${toSafeTemplateStringValue$LWS(parsedURL$LWS.normalizedURL)}`);
+        }
+      }
+      ReflectApply$LWS$1(HTMLTrackElementProtoSrcSetter$LWS, this, [urlString$LWS]);
+    }
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      registerAttributeSetterDistortion$LWS(record$LWS, HTMLTrackElement$LWS, 'src', NAMESPACE_DEFAULT$LWS, src$LWS);
+    }
+    return [originalSrcSetter$LWS, src$LWS];
+  };
+}
 function initDistortionIDBFactoryDatabases$LWS({
   globalObject: {
     IDBFactory: IDBFactory$LWS
@@ -8808,6 +10427,165 @@ function initDistortionMutationObserverObserve$LWS({
     return distortionEntry$LWS;
   };
 }
+function initDistortionNamedNodeMapGetNamedItem$LWS({
+  globalObject: {
+    document: sandboxDocument$LWS,
+    NamedNodeMap: {
+      prototype: {
+        getNamedItem: originalGetNamedItem$LWS
+      }
+    }
+  }
+}) {
+  return function distortionNamedNodeMapGetNamedItem$LWS(record$LWS) {
+    return [originalGetNamedItem$LWS, function getNamedItem$LWS(...args$LWS) {
+      const {
+        length: length$LWS
+      } = args$LWS;
+      if (isGaterEnabledFeature$LWS('changesSince.264') && length$LWS > 0) {
+        // Guard against TOCTOU attacks: force the native call
+        // to see the same value our checks ran against.
+        const coerced$LWS = toSafeStringValue$LWS(args$LWS[0]);
+        args$LWS[0] = coerced$LWS;
+        const element$LWS = getOwnerElement$LWS(this);
+        if (element$LWS !== undefined) {
+          // Consult the read-side registry. A throwing
+          // registered getter (e.g. nonce) refuses the
+          // read by propagating its exception. A value-
+          // substituting getter (e.g. iframe.src pending
+          // URL) returns a string; if the native attribute
+          // store has no Attr for this name, synthesize a
+          // detached Attr carrying the substituted value
+          // so sandbox code can read .value as expected.
+          // If the native store already has an Attr,
+          // prefer it.
+          const override$LWS = getAttributeGetterDistortion$LWS(record$LWS, element$LWS, coerced$LWS);
+          if (override$LWS !== undefined) {
+            const overrideValue$LWS = ReflectApply$LWS$1(override$LWS, element$LWS, []);
+            if (overrideValue$LWS !== null && overrideValue$LWS !== undefined) {
+              const nativeAttr$LWS = ReflectApply$LWS$1(originalGetNamedItem$LWS, this, args$LWS);
+              if (nativeAttr$LWS !== null) {
+                return nativeAttr$LWS;
+              }
+              const synth$LWS = ReflectApply$LWS$1(DocumentProtoCreateAttribute$LWS, sandboxDocument$LWS, [coerced$LWS]);
+              synth$LWS.value = overrideValue$LWS;
+              return synth$LWS;
+            }
+          }
+        }
+      }
+      return ReflectApply$LWS$1(originalGetNamedItem$LWS, this, args$LWS);
+    }];
+  };
+}
+function initDistortionNamedNodeMapGetNamedItemNS$LWS({
+  globalObject: {
+    document: sandboxDocument$LWS,
+    NamedNodeMap: {
+      prototype: {
+        getNamedItemNS: originalGetNamedItemNS$LWS
+      }
+    }
+  }
+}) {
+  return function distortionNamedNodeMapGetNamedItemNS$LWS(record$LWS) {
+    return [originalGetNamedItemNS$LWS, function getNamedItemNS$LWS(...args$LWS) {
+      const {
+        length: length$LWS
+      } = args$LWS;
+      if (isGaterEnabledFeature$LWS('changesSince.264') && length$LWS >= 2) {
+        // Guard against TOCTOU attacks: force the native call
+        // to see the same values our checks ran against.
+        const coercedNS$LWS = args$LWS[0] === null || args$LWS[0] === undefined ? args$LWS[0] : toSafeStringValue$LWS(args$LWS[0]);
+        const coercedName$LWS = toSafeStringValue$LWS(args$LWS[1]);
+        args$LWS[0] = coercedNS$LWS;
+        args$LWS[1] = coercedName$LWS;
+        const element$LWS = getOwnerElement$LWS(this);
+        if (element$LWS !== undefined) {
+          const ns$LWS = normalizeNamespace$LWS(coercedNS$LWS);
+          const override$LWS = getAttributeGetterDistortion$LWS(record$LWS, element$LWS, coercedName$LWS, ns$LWS);
+          if (override$LWS !== undefined) {
+            const overrideValue$LWS = ReflectApply$LWS$1(override$LWS, element$LWS, []);
+            if (overrideValue$LWS !== null && overrideValue$LWS !== undefined) {
+              const nativeAttr$LWS = ReflectApply$LWS$1(originalGetNamedItemNS$LWS, this, args$LWS);
+              if (nativeAttr$LWS !== null) {
+                return nativeAttr$LWS;
+              }
+              const synth$LWS = ReflectApply$LWS$1(DocumentProtoCreateAttributeNS$LWS, sandboxDocument$LWS, [ns$LWS, coercedName$LWS]);
+              synth$LWS.value = overrideValue$LWS;
+              return synth$LWS;
+            }
+          }
+        }
+      }
+      return ReflectApply$LWS$1(originalGetNamedItemNS$LWS, this, args$LWS);
+    }];
+  };
+}
+const SANDBOX_ATTR$1$LWS = 'sandbox';
+function initDistortionNamedNodeMapRemoveNamedItem$LWS({
+  globalObject: {
+    HTMLIFrameElement: HTMLIFrameElement$LWS,
+    NamedNodeMap: {
+      prototype: {
+        removeNamedItem: originalRemoveNamedItem$LWS
+      }
+    }
+  }
+}) {
+  const distortionEntry$LWS = [originalRemoveNamedItem$LWS, function removeNamedItem$LWS(...args$LWS) {
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      if (args$LWS.length > 0) {
+        const attrName$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, toSafeStringValue$LWS(args$LWS[0]), []);
+        if (attrName$LWS === SANDBOX_ATTR$1$LWS) {
+          // getOwnerElement returns undefined if the Element.attributes
+          // getter distortion hasn't run yet; in that case the instanceof
+          // check short-circuits and we fall through to the original method.
+          const element$LWS = getOwnerElement$LWS(this);
+          if (element$LWS instanceof HTMLIFrameElement$LWS) {
+            throw new LockerSecurityError$LWS("Cannot remove 'sandbox' attribute from HTMLIFrameElement.");
+          }
+        }
+      }
+    }
+    return ReflectApply$LWS$1(originalRemoveNamedItem$LWS, this, args$LWS);
+  }];
+  return function distortionNamedNodeMapRemoveNamedItem$LWS() {
+    return distortionEntry$LWS;
+  };
+}
+const SANDBOX_ATTR$LWS = 'sandbox';
+function initDistortionNamedNodeMapRemoveNamedItemNS$LWS({
+  globalObject: {
+    HTMLIFrameElement: HTMLIFrameElement$LWS,
+    NamedNodeMap: {
+      prototype: {
+        removeNamedItemNS: originalRemoveNamedItemNS$LWS
+      }
+    }
+  }
+}) {
+  const distortionEntry$LWS = [originalRemoveNamedItemNS$LWS, function removeNamedItemNS$LWS(...args$LWS) {
+    if (isGaterEnabledFeature$LWS('changesSince.264')) {
+      if (args$LWS.length > 1) {
+        const attrName$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, toSafeStringValue$LWS(args$LWS[1]), []);
+        if (attrName$LWS === SANDBOX_ATTR$LWS) {
+          // getOwnerElement returns undefined if the Element.attributes
+          // getter distortion hasn't run yet; in that case the instanceof
+          // check short-circuits and we fall through to the original method.
+          const element$LWS = getOwnerElement$LWS(this);
+          if (element$LWS instanceof HTMLIFrameElement$LWS) {
+            throw new LockerSecurityError$LWS("Cannot remove 'sandbox' attribute from HTMLIFrameElement.");
+          }
+        }
+      }
+    }
+    return ReflectApply$LWS$1(originalRemoveNamedItemNS$LWS, this, args$LWS);
+  }];
+  return function distortionNamedNodeMapRemoveNamedItemNS$LWS() {
+    return distortionEntry$LWS;
+  };
+}
 function initDistortionNamedNodeMapSetNamedItem$LWS({
   globalObject: {
     Attr: Attr$LWS,
@@ -8886,6 +10664,27 @@ function initDistortionNavigatorServiceWorkerGetter$LWS({
     return distortionEntry$LWS;
   };
 }
+function initDistortionNodeGetRootNode$LWS({
+  globalObject: {
+    Node: Node$LWS,
+    ShadowRoot: ShadowRoot$LWS,
+    document: document$LWS
+  }
+}) {
+  const originalGetRootNode$LWS = ObjectLookupOwnValue$LWS(Node$LWS.prototype, 'getRootNode');
+  return function distortionNodeGetRootNode$LWS({
+    key: key$LWS
+  }) {
+    const distortionEntry$LWS = [originalGetRootNode$LWS, function getRootNode$LWS(...args$LWS) {
+      const realRoot$LWS = ReflectApply$LWS$1(originalGetRootNode$LWS, this, args$LWS);
+      if (isGaterEnabledFeature$LWS('changesSince.264') && realRoot$LWS instanceof ShadowRoot$LWS && !isShadowRootAccessibleInThisSandbox$LWS(key$LWS, realRoot$LWS)) {
+        return document$LWS;
+      }
+      return realRoot$LWS;
+    }];
+    return distortionEntry$LWS;
+  };
+}
 const {
   isSharedElement: isSharedElement$k$LWS,
   isAllowedSharedElementChild: isAllowedSharedElementChild$1$LWS
@@ -8942,7 +10741,7 @@ function initDistortionNodeValueSetter$LWS({
         const attrName$LWS = ReflectApply$LWS$1(AttrProtoNameGetter$LWS, this, []);
         const attrNamespace$LWS = ReflectApply$LWS$1(AttrProtoNamespaceURIGetter$LWS, this, []);
         const normalizedNamespace$LWS = normalizeNamespace$LWS(attrNamespace$LWS);
-        const distortion$LWS = getAttributeDistortion$LWS(record$LWS, ownerEl$LWS, attrName$LWS, normalizedNamespace$LWS);
+        const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, ownerEl$LWS, attrName$LWS, normalizedNamespace$LWS);
         // istanbul ignore next: needs default platform behavior test
         if (distortion$LWS) {
           ReflectApply$LWS$1(distortion$LWS, ownerEl$LWS, [value$LWS]);
@@ -8954,6 +10753,56 @@ function initDistortionNodeValueSetter$LWS({
     }];
   };
 }
+function initDistortionNodeParentElementGetter$LWS({
+  globalObject: {
+    Node: Node$LWS,
+    ShadowRoot: ShadowRoot$LWS
+  }
+}) {
+  const originalParentElementGetter$LWS = ObjectLookupOwnGetter$LWS$1(Node$LWS.prototype, 'parentElement');
+  const originalGetRootNode$LWS = ObjectLookupOwnValue$LWS(Node$LWS.prototype, 'getRootNode');
+  return function distortionNodeParentElementGetter$LWS({
+    key: key$LWS
+  }) {
+    const distortionEntry$LWS = [originalParentElementGetter$LWS, function parentElement$LWS() {
+      const parent$LWS = ReflectApply$LWS$1(originalParentElementGetter$LWS, this, []);
+      if (parent$LWS === null || !isGaterEnabledFeature$LWS('changesSince.264')) {
+        return parent$LWS;
+      }
+      const parentRoot$LWS = ReflectApply$LWS$1(originalGetRootNode$LWS, parent$LWS, []);
+      if (parentRoot$LWS instanceof ShadowRoot$LWS && !isShadowRootAccessibleInThisSandbox$LWS(key$LWS, parentRoot$LWS)) {
+        return null;
+      }
+      return parent$LWS;
+    }];
+    return distortionEntry$LWS;
+  };
+}
+function initDistortionNodeParentNodeGetter$LWS({
+  globalObject: {
+    Node: Node$LWS,
+    ShadowRoot: ShadowRoot$LWS
+  }
+}) {
+  const originalParentNodeGetter$LWS = ObjectLookupOwnGetter$LWS$1(Node$LWS.prototype, 'parentNode');
+  const originalGetRootNode$LWS = ObjectLookupOwnValue$LWS(Node$LWS.prototype, 'getRootNode');
+  return function distortionNodeParentNodeGetter$LWS({
+    key: key$LWS
+  }) {
+    const distortionEntry$LWS = [originalParentNodeGetter$LWS, function parentNode$LWS() {
+      const parent$LWS = ReflectApply$LWS$1(originalParentNodeGetter$LWS, this, []);
+      if (parent$LWS === null || !isGaterEnabledFeature$LWS('changesSince.264')) {
+        return parent$LWS;
+      }
+      const parentRoot$LWS = ReflectApply$LWS$1(originalGetRootNode$LWS, parent$LWS, []);
+      if (parentRoot$LWS instanceof ShadowRoot$LWS && !isShadowRootAccessibleInThisSandbox$LWS(key$LWS, parentRoot$LWS)) {
+        return null;
+      }
+      return parent$LWS;
+    }];
+    return distortionEntry$LWS;
+  };
+}
 const {
   isSharedElement: isSharedElement$j$LWS
 } = rootValidator$LWS;
@@ -9093,7 +10942,7 @@ function initDistortionNodeTextContentSetter$LWS({
         const attrName$LWS = ReflectApply$LWS$1(AttrProtoNameGetter$LWS, this, []);
         const attrNamespace$LWS = ReflectApply$LWS$1(AttrProtoNamespaceURIGetter$LWS, this, []);
         const normalizedNamespace$LWS = normalizeNamespace$LWS(attrNamespace$LWS);
-        const distortion$LWS = getAttributeDistortion$LWS(record$LWS, ownerEl$LWS, attrName$LWS, normalizedNamespace$LWS);
+        const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, ownerEl$LWS, attrName$LWS, normalizedNamespace$LWS);
         // istanbul ignore next: needs default platform behavior test
         if (distortion$LWS) {
           ReflectApply$LWS$1(distortion$LWS, ownerEl$LWS, [valueAsString$LWS]);
@@ -9729,6 +11578,9 @@ function initDistortionRangeCloneRange$LWS({
     return distortionEntry$LWS;
   };
 }
+const {
+  isIframeSrcdocScriptAttack: isIframeSrcdocScriptAttack$2$LWS
+} = rootValidator$LWS;
 function initDistortionRangeCreateContextualFragment$LWS({
   document: document$LWS,
   globalObject: {
@@ -9754,6 +11606,9 @@ function initDistortionRangeCreateContextualFragment$LWS({
           // for association to this sandbox.
           setCustomElementsRegistry$LWS(document$LWS, key$LWS);
           args$LWS[0] = lwsInternalPolicy$LWS.createHTML(tagString$LWS, key$LWS, ContentType$LWS.HTML);
+          if (isGaterEnabledFeature$LWS('changesSince.264') && isIframeSrcdocScriptAttack$2$LWS(args$LWS[0])) {
+            throw new LockerSecurityError$LWS(`Cannot 'createContextualFragment' using an unsecure ${toSafeTemplateStringValue$LWS(args$LWS[0])}.`);
+          }
         }
       }
       return ReflectApply$LWS$1(originalCreateContextualFragment$LWS, this, args$LWS);
@@ -9993,6 +11848,63 @@ function initDistortionRangeToString$LWS({
     return distortionEntry$LWS;
   };
 }
+
+// W-22602807: distort an iframe contentWindow realm's Reflect.apply.
+// See Function/cross-realm-invocation.ts for the threat model.
+//
+// Unlike Function.prototype.apply, the callee is the FIRST ARGUMENT (not
+// `this`) and the invocation never routes through Function.prototype.call, so
+// it is an independent doorway that must be distorted separately.
+function initDistortionReflectApply$LWS({
+  globalObject: {
+    Reflect: {
+      apply: originalReflectApply$LWS
+    }
+  }
+}) {
+  return function distortionReflectApply$LWS({
+    globalObject: globalObject$LWS,
+    root: root$LWS
+  }) {
+    if (!getDistortableFrameElement$LWS(globalObject$LWS)) {
+      return undefined;
+    }
+    return [originalReflectApply$LWS, function apply$LWS(target$LWS, thisArg$LWS, argsArray$LWS) {
+      return ReflectApply$LWS$1(substituteDistortedCallee$LWS(root$LWS, target$LWS), thisArg$LWS, argsArray$LWS == null ? [] : argsArray$LWS);
+    }];
+  };
+}
+
+// W-22602807: distort an iframe contentWindow realm's Reflect.construct.
+// See Function/cross-realm-invocation.ts for the threat model.
+//
+// Construct semantics (not call): the callee is the FIRST ARGUMENT and is
+// invoked as a constructor. Substitute it for its distorted counterpart, then
+// construct with the sandbox-realm Reflect.construct, preserving the optional
+// newTarget argument.
+function initDistortionReflectConstruct$LWS({
+  globalObject: {
+    Reflect: {
+      construct: originalReflectConstruct$LWS
+    }
+  }
+}) {
+  return function distortionReflectConstruct$LWS({
+    globalObject: globalObject$LWS,
+    root: root$LWS
+  }) {
+    if (!getDistortableFrameElement$LWS(globalObject$LWS)) {
+      return undefined;
+    }
+    return [originalReflectConstruct$LWS, function construct$LWS(target$LWS, argsArray$LWS, newTarget$LWS) {
+      const substituted$LWS = substituteDistortedCallee$LWS(root$LWS, target$LWS);
+      if (arguments.length > 2) {
+        return ReflectConstruct$LWS(substituted$LWS, argsArray$LWS == null ? [] : argsArray$LWS, newTarget$LWS);
+      }
+      return ReflectConstruct$LWS(substituted$LWS, argsArray$LWS == null ? [] : argsArray$LWS);
+    }];
+  };
+}
 function initDistortionReportingObserverCtor$LWS({
   globalObject: {
     ReportingObserver: originalReportingObserverCtor$LWS
@@ -10640,7 +12552,7 @@ function createDistortionStorageFactoryInitializer$LWS(storageName$LWS) {
     try {
       originalStorageObject$LWS = globalObject$LWS[storageName$LWS];
       // eslint-disable-next-line no-empty
-    } catch (_unused3$LWS) {}
+    } catch (_unused4$LWS) {}
     // istanbul ignore if: currently unreachable via tests
     if (!isObject$LWS$1(originalStorageObject$LWS)) {
       return noop$LWS$1;
@@ -10782,7 +12694,7 @@ function initDistortionSVGAnimateElementAttributeNameAttribute$LWS({
         const originalAttributeValue$LWS = ReflectApply$LWS$1(ElementProtoGetAttribute$LWS, el$LWS, [attrName$LWS]);
         // istanbul ignore else: needs default platform behavior test
         if (originalAttributeValue$LWS) {
-          const distortion$LWS = getAttributeDistortion$LWS(record$LWS, el$LWS, attrName$LWS);
+          const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, el$LWS, attrName$LWS);
           // istanbul ignore else: needs default platform behavior test
           if (distortion$LWS) {
             ReflectApply$LWS$1(distortion$LWS, el$LWS, [originalAttributeValue$LWS]);
@@ -10790,7 +12702,7 @@ function initDistortionSVGAnimateElementAttributeNameAttribute$LWS({
         }
       }
     }
-    registerAttributeDistortion$LWS(record$LWS, SVGAnimateElement$LWS, 'attributeName', NAMESPACE_DEFAULT$LWS, function attributeName$LWS(value$LWS) {
+    registerAttributeSetterDistortion$LWS(record$LWS, SVGAnimateElement$LWS, 'attributeName', NAMESPACE_DEFAULT$LWS, function attributeName$LWS(value$LWS) {
       ReflectApply$LWS$1(originalSetAttribute$LWS, this, ['attributeName', value$LWS]);
       if (value$LWS === 'href') {
         distortAttribute$LWS(this, 'from');
@@ -10817,7 +12729,7 @@ function initDistortionSVGAnimateElementFromAttribute$LWS({
     ReflectApply$LWS$1(originalSetAttribute$LWS, this, ['from', value$LWS]);
   }
   return function distortionSVGAnimateElementFromAttribute$LWS(record$LWS) {
-    registerAttributeDistortion$LWS(record$LWS, SVGAnimateElement$LWS, 'from', NAMESPACE_DEFAULT$LWS, from$LWS);
+    registerAttributeSetterDistortion$LWS(record$LWS, SVGAnimateElement$LWS, 'from', NAMESPACE_DEFAULT$LWS, from$LWS);
   };
 }
 function initDistortionSVGAnimateElementToAttribute$LWS({
@@ -10837,7 +12749,7 @@ function initDistortionSVGAnimateElementToAttribute$LWS({
     ReflectApply$LWS$1(originalSetAttribute$LWS, this, ['to', value$LWS]);
   }
   return function distortionSVGAnimateElementToAttribute$LWS(record$LWS) {
-    registerAttributeDistortion$LWS(record$LWS, SVGAnimateElement$LWS, 'to', NAMESPACE_DEFAULT$LWS, to$LWS);
+    registerAttributeSetterDistortion$LWS(record$LWS, SVGAnimateElement$LWS, 'to', NAMESPACE_DEFAULT$LWS, to$LWS);
   };
 }
 function initDistortionSVGAnimateElementValuesAttribute$LWS({
@@ -10865,7 +12777,7 @@ function initDistortionSVGAnimateElementValuesAttribute$LWS({
     ReflectApply$LWS$1(originalSetAttribute$LWS, this, ['values', returnValues$LWS]);
   }
   return function distortionSVGAnimateElementValuesAttribute$LWS(record$LWS) {
-    registerAttributeDistortion$LWS(record$LWS, SVGAnimateElement$LWS, 'values', NAMESPACE_DEFAULT$LWS, values$LWS);
+    registerAttributeSetterDistortion$LWS(record$LWS, SVGAnimateElement$LWS, 'values', NAMESPACE_DEFAULT$LWS, values$LWS);
   };
 }
 function initDistortionSVGElementDatasetGetter$LWS({
@@ -10941,10 +12853,10 @@ function initDistortionSVGScriptElementHrefSetter$LWS({
   }
 }) {
   return function distortionSVGScriptElementHrefSetter$LWS(record$LWS) {
-    registerAttributeDistortion$LWS(record$LWS, SVGScriptElement$LWS, 'href', NAMESPACE_XLINK$LWS, createScriptDistortion$LWS(record$LWS, 'href'));
-    registerAttributeDistortion$LWS(record$LWS, SVGScriptElement$LWS, 'xlink:href', NAMESPACE_XLINK$LWS, createScriptDistortion$LWS(record$LWS, 'xlink:href'));
-    registerAttributeDistortion$LWS(record$LWS, SVGScriptElement$LWS, 'href', NAMESPACE_DEFAULT$LWS, createScriptDistortion$LWS(record$LWS, 'href'));
-    registerAttributeDistortion$LWS(record$LWS, SVGScriptElement$LWS, 'xlink:href', NAMESPACE_DEFAULT$LWS, createScriptDistortion$LWS(record$LWS, 'xlink:href'));
+    registerAttributeSetterDistortion$LWS(record$LWS, SVGScriptElement$LWS, 'href', NAMESPACE_XLINK$LWS, createScriptDistortion$LWS(record$LWS, 'href'));
+    registerAttributeSetterDistortion$LWS(record$LWS, SVGScriptElement$LWS, 'xlink:href', NAMESPACE_XLINK$LWS, createScriptDistortion$LWS(record$LWS, 'xlink:href'));
+    registerAttributeSetterDistortion$LWS(record$LWS, SVGScriptElement$LWS, 'href', NAMESPACE_DEFAULT$LWS, createScriptDistortion$LWS(record$LWS, 'href'));
+    registerAttributeSetterDistortion$LWS(record$LWS, SVGScriptElement$LWS, 'xlink:href', NAMESPACE_DEFAULT$LWS, createScriptDistortion$LWS(record$LWS, 'xlink:href'));
   };
 }
 function initDistortionSVGSetElementAttributeNameAttribute$LWS({
@@ -10963,7 +12875,7 @@ function initDistortionSVGSetElementAttributeNameAttribute$LWS({
         const originalAttributeValue$LWS = ReflectApply$LWS$1(ElementProtoGetAttribute$LWS, el$LWS, [attrName$LWS]);
         // istanbul ignore else: needs default platform behavior test
         if (originalAttributeValue$LWS) {
-          const distortion$LWS = getAttributeDistortion$LWS(record$LWS, el$LWS, attrName$LWS);
+          const distortion$LWS = getAttributeSetterDistortion$LWS(record$LWS, el$LWS, attrName$LWS);
           // istanbul ignore else: needs default platform behavior test
           if (distortion$LWS) {
             ReflectApply$LWS$1(distortion$LWS, el$LWS, [originalAttributeValue$LWS]);
@@ -10977,7 +12889,7 @@ function initDistortionSVGSetElementAttributeNameAttribute$LWS({
         distortAttribute$LWS(this, 'to');
       }
     }
-    registerAttributeDistortion$LWS(record$LWS, SVGSetElement$LWS, 'attributeName', NAMESPACE_DEFAULT$LWS, attributeName$LWS);
+    registerAttributeSetterDistortion$LWS(record$LWS, SVGSetElement$LWS, 'attributeName', NAMESPACE_DEFAULT$LWS, attributeName$LWS);
   };
 }
 function initDistortionSVGSetElementToAttribute$LWS({
@@ -10997,7 +12909,7 @@ function initDistortionSVGSetElementToAttribute$LWS({
     ReflectApply$LWS$1(originalSetAttribute$LWS, this, ['to', value$LWS]);
   }
   return function distortionSVGSetElementToAttribute$LWS(record$LWS) {
-    registerAttributeDistortion$LWS(record$LWS, SVGSetElement$LWS, 'to', NAMESPACE_DEFAULT$LWS, to$LWS);
+    registerAttributeSetterDistortion$LWS(record$LWS, SVGSetElement$LWS, 'to', NAMESPACE_DEFAULT$LWS, to$LWS);
   };
 }
 function createDistortionHrefAttributeFactoryInitializer$LWS(attributeName$LWS) {
@@ -11017,13 +12929,13 @@ function createDistortionHrefAttributeFactoryInitializer$LWS(attributeName$LWS)
       ReflectApply$LWS$1(originalSetAttributeNS$LWS, this, [NAMESPACE_XLINK$LWS, attributeName$LWS, returnValue$LWS]);
     }
     return function distortionHrefAttributeFactory$LWS(record$LWS) {
-      registerAttributeDistortion$LWS(record$LWS, SVGUseElement$LWS, attributeName$LWS, NAMESPACE_XLINK$LWS, xlinkNamespaceDistortion$LWS);
+      registerAttributeSetterDistortion$LWS(record$LWS, SVGUseElement$LWS, attributeName$LWS, NAMESPACE_XLINK$LWS, xlinkNamespaceDistortion$LWS);
       if (attributeName$LWS === 'href') {
         const defaultNamespaceDistortion$LWS = function defaultNamespaceDistortion$LWS(value$LWS) {
           const returnValue$LWS = value$LWS === null || value$LWS === undefined || value$LWS === '' ? /* istanbul ignore next: needs default platform behavior test */value$LWS : sanitizeSvgHref$LWS(value$LWS);
           ReflectApply$LWS$1(originalSetAttribute$LWS, this, [attributeName$LWS, returnValue$LWS]);
         };
-        registerAttributeDistortion$LWS(record$LWS, SVGUseElement$LWS, attributeName$LWS, NAMESPACE_DEFAULT$LWS, defaultNamespaceDistortion$LWS);
+        registerAttributeSetterDistortion$LWS(record$LWS, SVGUseElement$LWS, attributeName$LWS, NAMESPACE_DEFAULT$LWS, defaultNamespaceDistortion$LWS);
       }
     };
   };
@@ -11046,7 +12958,18 @@ function initDistortionTrustedTypePolicyFactoryCreatePolicy$LWS({
     return noop$LWS$1;
   }
   const distortionEntry$LWS = [originalCreatePolicy$LWS, function createPolicy$LWS(...args$LWS) {
-    const name$LWS = args$LWS.length ? args$LWS[0] : /* istanbul ignore next: needs default platform behavior test */undefined;
+    let name$LWS = args$LWS.length ? args$LWS[0] : /* istanbul ignore next: needs default platform behavior test */undefined;
+    // Coerce the policy name before the equality check. Without this,
+    // a value like `{ toString: () => 'default' }` slips past the
+    // strict equality (object !== string) while the native
+    // createPolicy stringifies it per spec — creating a 'default'
+    // policy LWS thought it had blocked. Substitute the coerced
+    // string into args so the native call sees the same value the
+    // guard inspected.
+    if (isGaterEnabledFeature$LWS('changesSince.264') && args$LWS.length) {
+      name$LWS = toSafeStringValue$LWS(args$LWS[0]);
+      args$LWS[0] = name$LWS;
+    }
     // istanbul ignore else: needs default platform behavior test
     if (name$LWS === 'default') {
       throw new LockerSecurityError$LWS(createTrustedTypesExceptionMessage$LWS(name$LWS));
@@ -11055,7 +12978,7 @@ function initDistortionTrustedTypePolicyFactoryCreatePolicy$LWS({
     try {
       // istanbul ignore next: needs default platform behavior test
       return ReflectApply$LWS$1(originalCreatePolicy$LWS, this, args$LWS);
-    } catch (_unused4$LWS) {
+    } catch (_unused5$LWS) {
       // istanbul ignore next: this is tested, but currently cannot be tested in the coverage environment
       consoleWarn$LWS(`${createTrustedTypesExceptionMessage$LWS(name$LWS)} Substituting with Lightning Web Security policy.`);
     }
@@ -11128,7 +13051,7 @@ function initDistortionURLCreateObjectURL$LWS({
         ReflectApply$LWS$1(XhrProtoOpen$LWS, xhr$LWS, ['GET', outURL$LWS, false]);
         try {
           ReflectApply$LWS$1(XhrProtoSend$LWS, xhr$LWS, []);
-        } catch (_unused5$LWS) {
+        } catch (_unused6$LWS) {
           throw new LockerSecurityError$LWS(`Unable to verify ${toSafeTemplateStringValue$LWS(blobObject$LWS)} is secure.`);
         }
         const responseText$LWS = ReflectApply$LWS$1(XhrProtoResponseTextGetter$LWS, xhr$LWS, []);
@@ -11545,6 +13468,44 @@ function initDistortionWindowOpen$LWS({
         throw new LockerSecurityError$LWS(`Cannot open disallowed endpoint: ${toSafeTemplateStringValue$LWS(parsedURL$LWS.normalizedURL)}`);
       }
     }
+    // Determine whether the target replaces the current browsing context.
+    const target$LWS = normalizedArgs$LWS.length > 1 ? normalizedArgs$LWS[1] : undefined;
+    const willOpenInSameBrowsingContext$LWS = target$LWS === '_self' || target$LWS === '_parent' || target$LWS === '_top';
+    // W-22297117
+    // Block same-origin window.open() for new browsing contexts and inject
+    // noopener to sever the bidirectional Window reference.
+    //
+    // Threat model: even with noopener (which prevents the *caller* from
+    // getting a child Window handle), a same-origin child page executes
+    // scripts with full system-mode privileges. An attacker can craft a
+    // payload URL (e.g. /resource/...) whose scripts exfiltrate cookies
+    // or session tokens via fetch() without needing a reference back.
+    //
+    // Defence:
+    //   1. Block same-origin URLs for new browsing contexts entirely.
+    //      The opened page would run unsandboxed, so navigation to it
+    //      must not be allowed from sandboxed code.
+    //   2. Inject "noopener" for any remaining opens (cross-origin, about:
+    //      scheme) so the caller never receives a live Window reference.
+    //
+    // Same-browsing-context targets (_self, _parent, _top) are excluded:
+    // they navigate the current context (no new unsandboxed page), and the
+    // existing URL validation (gate 262) already guards them.
+    if (isGaterEnabledFeature$LWS('changesSince.264') && !willOpenInSameBrowsingContext$LWS) {
+      if (isSameOriginURL$LWS(resourceUrl$LWS)) {
+        throw new LockerSecurityError$LWS('Cannot open same-origin URL in a new browsing context.');
+      }
+      // For cross-origin / about: URLs, inject noopener so the caller
+      // receives null and the child has no opener reference.
+      const features$LWS = normalizedArgs$LWS.length > 2 ? normalizedArgs$LWS[2] : undefined;
+      if (typeof features$LWS === 'string' && features$LWS !== '') {
+        if (!isNoopenerPresent$LWS(features$LWS)) {
+          normalizedArgs$LWS[2] = `${features$LWS},noopener`;
+        }
+      } else {
+        normalizedArgs$LWS[2] = 'noopener';
+      }
+    }
     const childWindow$LWS = ReflectApply$LWS$1(originalWindowOpen$LWS, this, normalizedArgs$LWS);
     // istanbul ignore next: behavior will not be tested in collection coverage
     if (!isGaterEnabledFeature$LWS('changesSince.262')) {
@@ -11558,14 +13519,8 @@ function initDistortionWindowOpen$LWS({
     }
     // W-14218118
     // If the target is '_self', '_parent', or '_top', only makes one request
-    if (normalizedArgs$LWS.length > 1) {
-      const {
-        1: target$LWS
-      } = normalizedArgs$LWS;
-      const willOpenInSameBrowsingContext$LWS = target$LWS === '_self' || target$LWS === '_parent' || target$LWS === '_top';
-      if (willOpenInSameBrowsingContext$LWS) {
-        return childWindow$LWS;
-      }
+    if (willOpenInSameBrowsingContext$LWS) {
+      return childWindow$LWS;
     }
     // W-13552831
     // If the target is anything else, two requests are made
@@ -11878,22 +13833,32 @@ initDistortionBroadcastChannelPostMessage$LWS,
 initDistortionCSSStyleRuleStyleGetter$LWS,
 // Document
 initDistortionDocumentCreateNodeIterator$LWS, initDistortionDocumentCreateTreeWalker$LWS, initDistortionDocumentDomainSetter$LWS, initDistortionDocumentOnsecuritypolicyviolation$LWS, initDistortionDocumentOpen$LWS,
+// DOMTokenList
+initDistortionDOMTokenListAdd$LWS, initDistortionDOMTokenListReplace$LWS, initDistortionDOMTokenListToggle$LWS, initDistortionDOMTokenListValueSetter$LWS,
 // Element
-initDistortionElementAttributesGetter$LWS, initDistortionElementGetInnerHTML$LWS, initDistortionElementInnerHTMLGetter$LWS, initDistortionElementOuterHTMLGetter$LWS, initDistortionElementRemove$LWS, initDistortionElementReplaceChildren$LWS, initDistortionElementReplaceWith$LWS,
+initDistortionElementAttributesGetter$LWS, initDistortionElementGetInnerHTML$LWS, initDistortionElementInnerHTMLGetter$LWS, initDistortionElementOuterHTMLGetter$LWS, initDistortionElementRemove$LWS, initDistortionElementRemoveAttribute$LWS, initDistortionElementRemoveAttributeNS$LWS, initDistortionElementRemoveAttributeNode$LWS, initDistortionElementReplaceChildren$LWS, initDistortionElementReplaceWith$LWS,
 // Function
-initDistortionFunction$LWS,
+initDistortionFunction$LWS, initDistortionFunctionApply$LWS, initDistortionFunctionBind$LWS, initDistortionFunctionCall$LWS,
 // History
 initDistortionHistoryPushState$LWS, initDistortionHistoryReplaceState$LWS,
 // HTMLElement
 initDistortionHTMLElementDatasetGetter$LWS, initDistortionHTMLElementInnerTextGetter$LWS, initDistortionHTMLElementInnerTextSetter$LWS, initDistortionHTMLElementOuterTextSetter$LWS, initDistortionHTMLElementStyleGetter$LWS,
 // HTMLIFrameElement
-initDistortionIFrameElementContentDocumentGetter$LWS, initDistortionIFrameElementContentWindowGetter$LWS, initDistortionHTMLIFrameElementSandboxGetter$LWS, initDistortionHTMLIFrameElementSandboxSetter$LWS, initDistortionHTMLIFrameElementSrcSetter$LWS,
+initDistortionIFrameElementContentDocumentGetter$LWS, initDistortionIFrameElementContentWindowGetter$LWS, initDistortionHTMLIFrameElementSandboxGetter$LWS, initDistortionHTMLIFrameElementSandboxSetter$LWS, initDistortionHTMLIFrameElementSrcGetter$LWS, initDistortionHTMLIFrameElementSrcSetter$LWS,
+// HTMLImageElement
+initDistortionHTMLImageElementSrcSetter$LWS, initDistortionHTMLImageElementSrcsetSetter$LWS,
 // HTMLLinkElement
-initDistortionHTMLLinkElementRelSetter$LWS, initDistortionHTMLLinkElementRelListSetter$LWS,
+initDistortionHTMLLinkElementHrefSetter$LWS, initDistortionHTMLLinkElementRelSetter$LWS, initDistortionHTMLLinkElementRelListSetter$LWS,
+// HTMLMediaElement
+initDistortionHTMLMediaElementSrcSetter$LWS,
 // HTMLMetaElement
 initDistortionHTMLMetaElementContentGetter$LWS,
 // HTMLObjectElement
-initDistortionHTMLObjectElementDataSetter$LWS,
+initDistortionHTMLObjectElementContentDocumentGetter$LWS, initDistortionHTMLObjectElementContentWindowGetter$LWS, initDistortionHTMLObjectElementDataSetter$LWS, initDistortionHTMLObjectElementTypeSetter$LWS,
+// HTMLSourceElement
+initDistortionHTMLSourceElementSrcSetter$LWS, initDistortionHTMLSourceElementSrcsetSetter$LWS,
+// HTMLTrackElement
+initDistortionHTMLTrackElementSrcSetter$LWS,
 // HTMLScriptElement
 initDistortionHTMLScriptElementInnerTextGetter$LWS, initDistortionHTMLScriptElementInnerTextSetter$LWS, initDistortionHTMLScriptElementSrcGetter$LWS, initDistortionHTMLScriptElementTextContentGetter$LWS, initDistortionHTMLScriptElementTextContentSetter$LWS, initDistortionHTMLScriptElementTextGetter$LWS, initDistortionHTMLScriptElementTextSetter$LWS,
 // IDBObjectStore
@@ -11915,7 +13880,7 @@ initDistortionNavigatorSendBeacon$LWS, initDistortionNavigatorServiceWorkerGette
 // Observable
 initDistortionObservableForEach$LWS, initDistortionObservableSubscribe$LWS,
 // Node
-initDistortionNodeRemoveChild$LWS, initDistortionNodeReplaceChild$LWS,
+initDistortionNodeGetRootNode$LWS, initDistortionNodeParentElementGetter$LWS, initDistortionNodeParentNodeGetter$LWS, initDistortionNodeRemoveChild$LWS, initDistortionNodeReplaceChild$LWS,
 // Performance
 initDistortionPerformanceMark$LWS, initDistortionPerformanceMeasure$LWS,
 // PerformanceMark
@@ -11926,6 +13891,8 @@ initDistortionPromiseAll$LWS, initDistortionPromiseAllSettled$LWS, initDistortio
 initDistortionNotificationCtor$LWS,
 // Range
 initDistortionRangeCloneContents$LWS, initDistortionRangeCloneRange$LWS, initDistortionRangeDeleteContents$LWS, initDistortionRangeExtractContents$LWS, initDistortionRangeGetBoundingClientRect$LWS, initDistortionRangeInsertNode$LWS, initDistortionRangeSelectNode$LWS, initDistortionRangeSelectNodeContents$LWS, initDistortionRangeSetEnd$LWS, initDistortionRangeSetEndAfter$LWS, initDistortionRangeSetEndBefore$LWS, initDistortionRangeSetStart$LWS, initDistortionRangeSetStartAfter$LWS, initDistortionRangeSetStartBefore$LWS, initDistortionRangeSurroundContents$LWS, initDistortionRangeToString$LWS,
+// Reflect
+initDistortionReflectApply$LWS, initDistortionReflectConstruct$LWS,
 // Selection
 initDistortionSelectionAnchorNodeGetter$LWS, initDistortionSelectionCollapse$LWS, initDistortionSelectionExtend$LWS, initDistortionSelectionFocusNodeGetter$LWS, initDistortionSelectionSelectAllChildren$LWS, initDistortionSelectionSetBaseAndExtent$LWS, initDistortionSelectionSetPosition$LWS, initDistortionSelectionToString$LWS,
 // ServiceWorkerContainer
@@ -11954,9 +13921,11 @@ initDistortionWorkerCtor$LWS, initDistortionWorkerProto$LWS,
 initDistortionXMLHttpRequestOpen$LWS];
 const internalKeyedDistortionFactoryInitializers$LWS = [
 // Attr
-initDistortionAttrValueSetter$LWS,
+initDistortionAttrValueGetter$LWS, initDistortionAttrValueSetter$LWS,
 // Aura
 initDistortionAuraUtilGlobalEval$LWS,
+// BroadcastChannel
+initDistortionBroadcastChannelCtor$LWS, initDistortionBroadcastChannelNameGetter$LWS,
 // CacheStorage
 initDistortionCacheStorageDelete$LWS, initDistortionCacheStorageHas$LWS, initDistortionCacheStorageKeys$LWS, initDistortionCacheStorageMatch$LWS, initDistortionCacheStorageOpen$LWS,
 // CookieStore
@@ -11964,7 +13933,7 @@ initDistortionCookieStoreDelete$LWS, initDistortionCookieStoreGet$LWS, initDisto
 // CustomElementRegistry
 initDistortionCustomElementRegistryDefine$LWS, initDistortionCustomElementRegistryGet$LWS, initDistortionCustomElementRegistryUpgrade$LWS, initDistortionCustomElementRegistryWhenDefined$LWS,
 // Document
-initDistortionDocumentCookieGetter$LWS, initDistortionDocumentCookieSetter$LWS, initDistortionDocumentCreateElement$LWS, initDistortionDocumentCreateElementNS$LWS, initDistortionDocumentExecCommand$LWS, initDistortionDocumentReplaceChildren$LWS,
+initDistortionDocumentCookieGetter$LWS, initDistortionDocumentCookieSetter$LWS, initDistortionDocumentCreateElement$LWS, initDistortionDocumentCreateElementNS$LWS, initDistortionDocumentExecCommand$LWS, initDistortionDocumentAdoptNode$LWS, initDistortionDocumentImportNode$LWS, initDistortionDocumentReplaceChildren$LWS,
 // DOMParser
 initDistortionDOMParserParseFromString$LWS,
 // Element
@@ -11974,9 +13943,9 @@ initDistortionEval$LWS,
 // Event
 initDistortionEventComposedPath$LWS, initDistortionEventPathGetter$LWS,
 // EventTarget
-initDistortionEventTargetAddEventListener$LWS,
+initDistortionEventTargetAddEventListener$LWS, initDistortionEventTargetDispatchEvent$LWS,
 // HTMLAnchorElement
-initDistortionHTMLAnchorElementHrefSetter$LWS,
+initDistortionHTMLAnchorElementHrefSetter$LWS, initDistortionHTMLAnchorElementProtocolSetter$LWS,
 // HTMLBaseElement
 initDistortionHTMLBaseElementHrefSetter$LWS,
 // HTMLBodyElement
@@ -11998,7 +13967,7 @@ initDistortionIDBFactoryDatabases$LWS, initDistortionIDBFactoryDeleteDatabase$LW
 // MathMLElement
 initDistortionMathMLElementOnsecuritypolicyviolation$LWS,
 // NamedNodeMap
-initDistortionNamedNodeMapSetNamedItem$LWS, initDistortionNamedNodeMapSetNamedItemNS$LWS,
+initDistortionNamedNodeMapGetNamedItem$LWS, initDistortionNamedNodeMapGetNamedItemNS$LWS, initDistortionNamedNodeMapRemoveNamedItem$LWS, initDistortionNamedNodeMapRemoveNamedItemNS$LWS, initDistortionNamedNodeMapSetNamedItem$LWS, initDistortionNamedNodeMapSetNamedItemNS$LWS,
 // Node
 initDistortionNodeValueSetter$LWS, initDistortionNodeTextContentGetter$LWS, initDistortionNodeTextContentSetter$LWS,
 // Range
@@ -12028,14 +13997,15 @@ initDistortionElementAfter$LWS, initDistortionElementAppend$LWS, initDistortionE
 // initDistortionNodeAppendChild,
 initDistortionNodeInsertBefore$LWS]);
 const externalKeyedDistortionFactoryInitializers$LWS = internalKeyedDistortionFactoryInitializers$LWS;
-const distortionFactoryInitializerToggleSwitches$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1([[initDistortionCacheStorageDelete$LWS, 'caches'], [initDistortionCacheStorageHas$LWS, 'caches'], [initDistortionCacheStorageKeys$LWS, 'caches'], [initDistortionCacheStorageMatch$LWS, 'caches'], [initDistortionCacheStorageOpen$LWS, 'caches'], [initDistortionCookieStoreDelete$LWS, 'cookieStore'], [initDistortionCookieStoreGet$LWS, 'cookieStore'], [initDistortionCookieStoreGetAll$LWS, 'cookieStore'], [initDistortionCookieStoreOnChange$LWS, 'cookieStore'], [initDistortionCookieStoreSet$LWS, 'cookieStore'], [initDistortionCSSStyleRuleStyleGetter$LWS, 'style'], [initDistortionCustomElementRegistryDefine$LWS, 'customElements'], [initDistortionCustomElementRegistryGet$LWS, 'customElements'], [initDistortionCustomElementRegistryUpgrade$LWS, 'customElements'], [initDistortionCustomElementRegistryWhenDefined$LWS, 'customElements'], [initDistortionDocumentCookieGetter$LWS, 'documentCookie'], [initDistortionDocumentCookieSetter$LWS, 'documentCookie'], [initDistortionDocumentDomainSetter$LWS, 'documentDomain'], [initDistortionDocumentExecCommand$LWS, 'documentExecCommand'], [initDistortionDOMParserParseFromString$LWS, 'domParserParseFromString'], [initDistortionElementAfter$LWS, 'element'], [initDistortionElementAppend$LWS, 'element'], [initDistortionElementAttributesGetter$LWS, 'attributes'], [initDistortionElementBefore$LWS, 'element'], [initDistortionElementGetInnerHTML$LWS, 'innerHTML'], [initDistortionElementInnerHTMLSetter$LWS, 'innerHTML'], [initDistortionElementInsertAdjacentElement$LWS, 'element'], [initDistortionElementInsertAdjacentHTML$LWS, 'element'], [initDistortionElementOuterHTMLSetter$LWS, 'element'], [initDistortionElementPrepend$LWS, 'element'], [initDistortionElementRemove$LWS, 'element'], [initDistortionElementReplaceChildren$LWS, 'element'], [initDistortionElementReplaceWith$LWS, 'element'], [initDistortionElementGetAttribute$LWS, 'attributes'], [initDistortionElementGetAttributeNode$LWS, 'attributes'], [initDistortionElementGetAttributeNodeNS$LWS, 'attributes'], [initDistortionElementGetAttributeNS$LWS, 'attributes'], [initDistortionElementSetAttribute$LWS, 'attributes'], [initDistortionElementSetAttributeNode$LWS, 'attributes'], [initDistortionElementSetAttributeNodeNS$LWS, 'attributes'], [initDistortionElementSetAttributeNS$LWS, 'attributes'], [initDistortionElementSetHTML$LWS, 'element'], [initDistortionElementToggleAttribute$LWS, 'attributes'], [initDistortionHTMLButtonElementFormActionSetter$LWS, 'form'], [initDistortionHTMLFormElementActionSetter$LWS, 'form'], [initDistortionHTMLInputElementFormActionSetter$LWS, 'form'], [initDistortionHistoryPushState$LWS, 'history'], [initDistortionHistoryReplaceState$LWS, 'history'], [initDistortionHTMLElementDatasetGetter$LWS, 'dataset'], [initDistortionHTMLElementStyleGetter$LWS, 'style'], [initDistortionHTMLScriptElementInnerTextGetter$LWS, 'script'], [initDistortionHTMLScriptElementInnerTextSetter$LWS, 'script'], [initDistortionHTMLScriptElementSrcGetter$LWS, 'script'], [initDistortionHTMLScriptElementSrcSetter$LWS, 'script'], [initDistortionHTMLScriptElementTextGetter$LWS, 'script'], [initDistortionHTMLScriptElementTextSetter$LWS, 'script'], [initDistortionIDBFactoryDatabases$LWS, 'indexedDB'], [initDistortionIDBFactoryDeleteDatabase$LWS, 'indexedDB'], [initDistortionIDBFactoryOpen$LWS, 'indexedDB'], [initDistortionIDBObjectStoreAdd$LWS, 'indexedDB'], [initDistortionIDBObjectStorePut$LWS, 'indexedDB'], [initDistortionLocalStorage$LWS, 'storage'], [initDistortionMessagePortPostMessage$LWS, 'postMessage'], [initDistortionIntersectionObserverObserve$LWS, 'observers'], [initDistortionMutationObserverObserve$LWS, 'mutationObserver'], [initDistortionPerformanceObserverObserve$LWS, 'observers'], [initDistortionResizeObserverObserve$LWS, 'observers'], [initDistortionNamedNodeMapSetNamedItem$LWS, 'attributes'], [initDistortionNamedNodeMapSetNamedItemNS$LWS, 'attributes'], [initDistortionNavigatorSendBeacon$LWS, 'navigatorSendBeacon'], [initDistortionObservableForEach$LWS, 'observable'], [initDistortionObservableSubscribe$LWS, 'observable'], [initDistortionNodeInsertBefore$LWS, 'node'], [initDistortionNodeRemoveChild$LWS, 'node'], [initDistortionNodeReplaceChild$LWS, 'node'], [initDistortionNodeTextContentGetter$LWS, 'node'], [initDistortionNodeTextContentSetter$LWS, 'node'], [initDistortionNodeValueSetter$LWS, 'node'], [initDistortionNotificationCtor$LWS, 'notification'], [initDistortionPerformanceMark$LWS, 'performance'], [initDistortionPerformanceMarkCtor$LWS, 'performance'], [initDistortionPerformanceMeasure$LWS, 'performance'], [initDistortionRangeCloneContents$LWS, 'range'], [initDistortionRangeCloneRange$LWS, 'range'], [initDistortionRangeCreateContextualFragment$LWS, 'range'], [initDistortionRangeDeleteContents$LWS, 'range'], [initDistortionRangeExtractContents$LWS, 'range'], [initDistortionRangeGetBoundingClientRect$LWS, 'range'], [initDistortionRangeInsertNode$LWS, 'range'], [initDistortionRangeSelectNode$LWS, 'range'], [initDistortionRangeSelectNodeContents$LWS, 'range'], [initDistortionRangeSetEnd$LWS, 'range'], [initDistortionRangeSetEndAfter$LWS, 'range'], [initDistortionRangeSetEndBefore$LWS, 'range'], [initDistortionRangeSetStart$LWS, 'range'], [initDistortionRangeSetStartAfter$LWS, 'range'], [initDistortionRangeSetStartBefore$LWS, 'range'], [initDistortionRangeSurroundContents$LWS, 'range'], [initDistortionRangeToString$LWS, 'range'], [initDistortionSelectionAnchorNodeGetter$LWS, 'selection'], [initDistortionSelectionCollapse$LWS, 'selection'], [initDistortionSelectionExtend$LWS, 'selection'], [initDistortionSelectionFocusNodeGetter$LWS, 'selection'], [initDistortionSelectionSelectAllChildren$LWS, 'selection'], [initDistortionSelectionSetBaseAndExtent$LWS, 'selection'], [initDistortionSelectionSetPosition$LWS, 'selection'], [initDistortionSelectionToString$LWS, 'selection'], [initDistortionSessionStorage$LWS, 'storage'], [initDistortionShadowRootInnerHTMLSetter$LWS, 'innerHTML'], [initDistortionStorage$LWS, 'storage'], [initDistortionStorageClear$LWS, 'storage'], [initDistortionStorageGetItem$LWS, 'storage'], [initDistortionStorageKey$LWS, 'storage'], [initDistortionStorageLength$LWS, 'storage'], [initDistortionStorageRemoveItem$LWS, 'storage'], [initDistortionStorageSetItem$LWS, 'storage'], [initDistortionSVGElementDatasetGetter$LWS, 'dataset'], [initDistortionSVGElementStyleGetter$LWS, 'style'], [initDistortionSVGAnimatedStringBaseValSetter$LWS, 'script'], [initDistortionSVGScriptElementHrefGetter$LWS, 'script'], [initDistortionSVGScriptElementHrefSetter$LWS, 'script'], [initDistortionWindowFetch$LWS, 'windowFetch'], [initDistortionWindowFetchLater$LWS, 'windowFetchLater'], [initDistortionWindowFramesGetter$LWS, 'windowFrames'], [initDistortionWindowGetComputedStyle$LWS, 'style'], [initDistortionWindowLengthGetter$LWS, 'windowFrames'], [initDistortionWindowNameGetter$LWS, 'windowName'], [initDistortionWindowNameSetter$LWS, 'windowName'], [initDistortionWindowPostMessage$LWS, 'postMessage'], [initDistortionWindowSetInterval$LWS, 'setInterval'], [initDistortionWindowSetTimeout$LWS, 'setTimeout'], [initDistortionXMLHttpRequestResponseGetter$LWS, 'xhr'], [initDistortionXMLHttpRequestResponseXMLGetter$LWS, 'xhr']]));
+const distortionFactoryInitializerToggleSwitches$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1([[initDistortionBroadcastChannelCtor$LWS, 'broadcastChannel'], [initDistortionBroadcastChannelNameGetter$LWS, 'broadcastChannel'], [initDistortionCacheStorageDelete$LWS, 'caches'], [initDistortionCacheStorageHas$LWS, 'caches'], [initDistortionCacheStorageKeys$LWS, 'caches'], [initDistortionCacheStorageMatch$LWS, 'caches'], [initDistortionCacheStorageOpen$LWS, 'caches'], [initDistortionCookieStoreDelete$LWS, 'cookieStore'], [initDistortionCookieStoreGet$LWS, 'cookieStore'], [initDistortionCookieStoreGetAll$LWS, 'cookieStore'], [initDistortionCookieStoreOnChange$LWS, 'cookieStore'], [initDistortionCookieStoreSet$LWS, 'cookieStore'], [initDistortionCSSStyleRuleStyleGetter$LWS, 'style'], [initDistortionCustomElementRegistryDefine$LWS, 'customElements'], [initDistortionCustomElementRegistryGet$LWS, 'customElements'], [initDistortionCustomElementRegistryUpgrade$LWS, 'customElements'], [initDistortionCustomElementRegistryWhenDefined$LWS, 'customElements'], [initDistortionDocumentCookieGetter$LWS, 'documentCookie'], [initDistortionDocumentCookieSetter$LWS, 'documentCookie'], [initDistortionDocumentDomainSetter$LWS, 'documentDomain'], [initDistortionDocumentExecCommand$LWS, 'documentExecCommand'], [initDistortionDOMParserParseFromString$LWS, 'domParserParseFromString'], [initDistortionDOMTokenListAdd$LWS, 'domTokenList'], [initDistortionDOMTokenListReplace$LWS, 'domTokenList'], [initDistortionDOMTokenListToggle$LWS, 'domTokenList'], [initDistortionDOMTokenListValueSetter$LWS, 'domTokenList'], [initDistortionElementAfter$LWS, 'element'], [initDistortionElementAppend$LWS, 'element'], [initDistortionElementAttributesGetter$LWS, 'attributes'], [initDistortionElementBefore$LWS, 'element'], [initDistortionElementGetInnerHTML$LWS, 'innerHTML'], [initDistortionElementInnerHTMLSetter$LWS, 'innerHTML'], [initDistortionElementInsertAdjacentElement$LWS, 'element'], [initDistortionElementInsertAdjacentHTML$LWS, 'element'], [initDistortionElementOuterHTMLSetter$LWS, 'element'], [initDistortionElementPrepend$LWS, 'element'], [initDistortionElementRemove$LWS, 'element'], [initDistortionElementReplaceChildren$LWS, 'element'], [initDistortionElementReplaceWith$LWS, 'element'], [initDistortionElementGetAttribute$LWS, 'attributes'], [initDistortionElementGetAttributeNode$LWS, 'attributes'], [initDistortionElementGetAttributeNodeNS$LWS, 'attributes'], [initDistortionElementGetAttributeNS$LWS, 'attributes'], [initDistortionElementSetAttribute$LWS, 'attributes'], [initDistortionElementSetAttributeNode$LWS, 'attributes'], [initDistortionElementSetAttributeNodeNS$LWS, 'attributes'], [initDistortionElementSetAttributeNS$LWS, 'attributes'], [initDistortionElementRemoveAttribute$LWS, 'attributes'], [initDistortionElementRemoveAttributeNS$LWS, 'attributes'], [initDistortionElementRemoveAttributeNode$LWS, 'attributes'], [initDistortionElementSetHTML$LWS, 'element'], [initDistortionElementToggleAttribute$LWS, 'attributes'], [initDistortionHTMLButtonElementFormActionSetter$LWS, 'form'], [initDistortionHTMLFormElementActionSetter$LWS, 'form'], [initDistortionHTMLInputElementFormActionSetter$LWS, 'form'], [initDistortionHistoryPushState$LWS, 'history'], [initDistortionHistoryReplaceState$LWS, 'history'], [initDistortionHTMLElementDatasetGetter$LWS, 'dataset'], [initDistortionHTMLElementStyleGetter$LWS, 'style'], [initDistortionHTMLImageElementSrcSetter$LWS, 'networkSrc'], [initDistortionHTMLImageElementSrcsetSetter$LWS, 'networkSrc'], [initDistortionHTMLLinkElementHrefSetter$LWS, 'networkSrc'], [initDistortionHTMLMediaElementSrcSetter$LWS, 'networkSrc'], [initDistortionHTMLSourceElementSrcSetter$LWS, 'networkSrc'], [initDistortionHTMLSourceElementSrcsetSetter$LWS, 'networkSrc'], [initDistortionHTMLTrackElementSrcSetter$LWS, 'networkSrc'], [initDistortionHTMLScriptElementInnerTextGetter$LWS, 'script'], [initDistortionHTMLScriptElementInnerTextSetter$LWS, 'script'], [initDistortionHTMLScriptElementSrcGetter$LWS, 'script'], [initDistortionHTMLScriptElementSrcSetter$LWS, 'script'], [initDistortionHTMLScriptElementTextGetter$LWS, 'script'], [initDistortionHTMLScriptElementTextSetter$LWS, 'script'], [initDistortionIDBFactoryDatabases$LWS, 'indexedDB'], [initDistortionIDBFactoryDeleteDatabase$LWS, 'indexedDB'], [initDistortionIDBFactoryOpen$LWS, 'indexedDB'], [initDistortionIDBObjectStoreAdd$LWS, 'indexedDB'], [initDistortionIDBObjectStorePut$LWS, 'indexedDB'], [initDistortionLocalStorage$LWS, 'storage'], [initDistortionMessagePortPostMessage$LWS, 'postMessage'], [initDistortionIntersectionObserverObserve$LWS, 'observers'], [initDistortionMutationObserverObserve$LWS, 'mutationObserver'], [initDistortionPerformanceObserverObserve$LWS, 'observers'], [initDistortionResizeObserverObserve$LWS, 'observers'], [initDistortionAttrValueGetter$LWS, 'attributes'], [initDistortionAttrValueSetter$LWS, 'attributes'], [initDistortionNamedNodeMapGetNamedItem$LWS, 'attributes'], [initDistortionNamedNodeMapGetNamedItemNS$LWS, 'attributes'], [initDistortionNamedNodeMapRemoveNamedItem$LWS, 'attributes'], [initDistortionNamedNodeMapRemoveNamedItemNS$LWS, 'attributes'], [initDistortionNamedNodeMapSetNamedItem$LWS, 'attributes'], [initDistortionNamedNodeMapSetNamedItemNS$LWS, 'attributes'], [initDistortionNavigatorSendBeacon$LWS, 'navigatorSendBeacon'], [initDistortionObservableForEach$LWS, 'observable'], [initDistortionObservableSubscribe$LWS, 'observable'], [initDistortionNodeGetRootNode$LWS, 'node'], [initDistortionNodeInsertBefore$LWS, 'node'], [initDistortionNodeParentElementGetter$LWS, 'node'], [initDistortionNodeParentNodeGetter$LWS, 'node'], [initDistortionNodeRemoveChild$LWS, 'node'], [initDistortionNodeReplaceChild$LWS, 'node'], [initDistortionNodeTextContentGetter$LWS, 'node'], [initDistortionNodeTextContentSetter$LWS, 'node'], [initDistortionNodeValueSetter$LWS, 'node'], [initDistortionNotificationCtor$LWS, 'notification'], [initDistortionPerformanceMark$LWS, 'performance'], [initDistortionPerformanceMarkCtor$LWS, 'performance'], [initDistortionPerformanceMeasure$LWS, 'performance'], [initDistortionRangeCloneContents$LWS, 'range'], [initDistortionRangeCloneRange$LWS, 'range'], [initDistortionRangeCreateContextualFragment$LWS, 'range'], [initDistortionRangeDeleteContents$LWS, 'range'], [initDistortionRangeExtractContents$LWS, 'range'], [initDistortionRangeGetBoundingClientRect$LWS, 'range'], [initDistortionRangeInsertNode$LWS, 'range'], [initDistortionRangeSelectNode$LWS, 'range'], [initDistortionRangeSelectNodeContents$LWS, 'range'], [initDistortionRangeSetEnd$LWS, 'range'], [initDistortionRangeSetEndAfter$LWS, 'range'], [initDistortionRangeSetEndBefore$LWS, 'range'], [initDistortionRangeSetStart$LWS, 'range'], [initDistortionRangeSetStartAfter$LWS, 'range'], [initDistortionRangeSetStartBefore$LWS, 'range'], [initDistortionRangeSurroundContents$LWS, 'range'], [initDistortionRangeToString$LWS, 'range'], [initDistortionSelectionAnchorNodeGetter$LWS, 'selection'], [initDistortionSelectionCollapse$LWS, 'selection'], [initDistortionSelectionExtend$LWS, 'selection'], [initDistortionSelectionFocusNodeGetter$LWS, 'selection'], [initDistortionSelectionSelectAllChildren$LWS, 'selection'], [initDistortionSelectionSetBaseAndExtent$LWS, 'selection'], [initDistortionSelectionSetPosition$LWS, 'selection'], [initDistortionSelectionToString$LWS, 'selection'], [initDistortionSessionStorage$LWS, 'storage'], [initDistortionShadowRootInnerHTMLSetter$LWS, 'innerHTML'], [initDistortionStorage$LWS, 'storage'], [initDistortionStorageClear$LWS, 'storage'], [initDistortionStorageGetItem$LWS, 'storage'], [initDistortionStorageKey$LWS, 'storage'], [initDistortionStorageLength$LWS, 'storage'], [initDistortionStorageRemoveItem$LWS, 'storage'], [initDistortionStorageSetItem$LWS, 'storage'], [initDistortionSVGElementDatasetGetter$LWS, 'dataset'], [initDistortionSVGElementStyleGetter$LWS, 'style'], [initDistortionSVGAnimatedStringBaseValSetter$LWS, 'script'], [initDistortionSVGScriptElementHrefGetter$LWS, 'script'], [initDistortionSVGScriptElementHrefSetter$LWS, 'script'], [initDistortionWindowFetch$LWS, 'windowFetch'], [initDistortionWindowFetchLater$LWS, 'windowFetchLater'], [initDistortionWindowFramesGetter$LWS, 'windowFrames'], [initDistortionWindowGetComputedStyle$LWS, 'style'], [initDistortionWindowLengthGetter$LWS, 'windowFrames'], [initDistortionWindowNameGetter$LWS, 'windowName'], [initDistortionWindowNameSetter$LWS, 'windowName'], [initDistortionWindowPostMessage$LWS, 'postMessage'], [initDistortionWindowSetInterval$LWS, 'setInterval'], [initDistortionWindowSetTimeout$LWS, 'setTimeout'], [initDistortionXMLHttpRequestResponseGetter$LWS, 'xhr'], [initDistortionXMLHttpRequestResponseXMLGetter$LWS, 'xhr']]));
 const DocumentBlockedProperties$LWS = ['parseHTMLUnsafe'];
 const DocumentProtoBlockedProperties$LWS = ['createProcessingInstruction', 'exitFullscreen', 'fullscreen', 'fullscreenElement', 'fullscreenEnabled', 'mozCancelFullScreen', 'mozFullScreen', 'mozFullScreenElement', 'mozFullScreenEnabled', 'onfullscreenchange', 'onfullscreenerror', 'onmozfullscreenchange', 'onmozfullscreenerror', 'onrejectionhandled', 'onunhandledrejection', 'parseHTMLUnsafe', 'releaseCapture', 'releaseEvents', 'requestStorageAccess', 'webkitFullScreenKeyboardInputAllowed', 'write', 'writeln'];
 const ElementProtoBlockedProperties$LWS = ['mozRequestFullScreen', 'onfullscreenchange', 'onfullscreenerror', 'requestFullscreen', 'webkitRequestFullScreen', 'webkitRequestFullscreen'];
 const EventProtoBlockedProperties$LWS = ['originalTarget', 'explicitOriginalTarget'];
 const HTMLElementBlockedAttributes$LWS = ['nonce'];
 const HTMLElementProtoBlockedProperties$LWS = ['nonce', 'onrejectionhandled', 'onunhandledrejection'];
-const HTMLEmbedElementProtoBlockedProperties$LWS = ['getSVGDocument'];
+const HTMLEmbedElementBlockedAttributes$LWS = ['src'];
+const HTMLEmbedElementProtoBlockedProperties$LWS = ['getSVGDocument', 'src'];
 
 // https://www.w3schools.com/tags/tag_iframe.asp
 const HTMLIFrameElementBlockedAttributes$LWS = ['srcdoc'];
@@ -12048,7 +14018,7 @@ const SVGElementProtoBlockedProperties$LWS = ['nonce'];
 const UIEventProtoBlockedProperties$LWS = ['rangeParent'];
 const WindowBlockedProperties$LWS = ['find', 'requestFileSystem', 'webkitRequestFileSystem'];
 const XSLTProcessorProtoBlockedProperties$LWS = ['transformToDocument', 'transformToFragment'];
-/*! version: 0.28.1 */
+/*! version: 0.28.3 */
 
 /*!
  * Copyright (C) 2021 salesforce.com, inc.
@@ -12057,7 +14027,7 @@ let pdpSchema$LWS;
 function getPdpSchema$LWS() {
   return pdpSchema$LWS;
 }
-/*! version: 0.28.1 */
+/*! version: 0.28.3 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -12317,10 +14287,21 @@ function getDistortionFactories$LWS(record$LWS) {
   const initializers$LWS = type$LWS === 1 /* SandboxType.Internal */ ?
   // instanbul ignore next: coverage is collected on the external sandbox test run
   ArrayConcat$LWS(internalDistortionFactoryInitializers$LWS, internalKeyedDistortionFactoryInitializers$LWS) : ArrayConcat$LWS(externalDistortionFactoryInitializers$LWS, externalKeyedDistortionFactoryInitializers$LWS);
-  addBlockedAttributeDistortionFactoryInitializers$LWS(HTMLElement$LWS, 'HTMLElement', HTMLElementBlockedAttributes$LWS, initializers$LWS);
-  addBlockedAttributeDistortionFactoryInitializers$LWS(HTMLIFrameElement$LWS, 'HTMLIFrameElement', HTMLIFrameElementBlockedAttributes$LWS, initializers$LWS);
-  addBlockedAttributeDistortionFactoryInitializers$LWS(HTMLScriptElement$LWS, 'HTMLScriptElement', HTMLScriptElementBlockedAttributes$LWS, initializers$LWS);
-  addBlockedAttributeDistortionFactoryInitializers$LWS(SVGElement$LWS, 'SVGElement', SVGElementBlockedAttributes$LWS, initializers$LWS);
+  addBlockedAttributeSetterDistortionFactoryInitializers$LWS(HTMLElement$LWS, 'HTMLElement', HTMLElementBlockedAttributes$LWS, initializers$LWS);
+  addBlockedAttributeSetterDistortionFactoryInitializers$LWS(HTMLEmbedElement, 'HTMLEmbedElement', HTMLEmbedElementBlockedAttributes$LWS, initializers$LWS);
+  addBlockedAttributeSetterDistortionFactoryInitializers$LWS(HTMLIFrameElement$LWS, 'HTMLIFrameElement', HTMLIFrameElementBlockedAttributes$LWS, initializers$LWS);
+  addBlockedAttributeSetterDistortionFactoryInitializers$LWS(HTMLScriptElement$LWS, 'HTMLScriptElement', HTMLScriptElementBlockedAttributes$LWS, initializers$LWS);
+  addBlockedAttributeSetterDistortionFactoryInitializers$LWS(SVGElement$LWS, 'SVGElement', SVGElementBlockedAttributes$LWS, initializers$LWS);
+  // Read-side block list: only the subset of write-blocked attributes that
+  // ALSO must not be readable. Today this is `nonce` only; attributes like
+  // `srcdoc` (HTMLIFrameElement) and `src` (HTMLEmbedElement) are
+  // write-blocked but legitimately readable, so they must NOT be added
+  // here. Closes previously-leaking surfaces (NamedNodeMap subscript,
+  // getNamedItem(NS), Attr.value) for the read-blocked subset.
+  const READ_BLOCKED_NONCE$LWS = ['nonce'];
+  addBlockedAttributeGetterDistortionFactoryInitializers$LWS(HTMLElement$LWS, READ_BLOCKED_NONCE$LWS, initializers$LWS);
+  addBlockedAttributeGetterDistortionFactoryInitializers$LWS(HTMLScriptElement$LWS, READ_BLOCKED_NONCE$LWS, initializers$LWS);
+  addBlockedAttributeGetterDistortionFactoryInitializers$LWS(SVGElement$LWS, READ_BLOCKED_NONCE$LWS, initializers$LWS);
   addBlockedPropertyDistortionFactoryInitializers$LWS(record$LWS, DataTransfer.prototype, DataTransferProtoBlockedProperties$LWS, initializers$LWS);
   addBlockedPropertyDistortionFactoryInitializers$LWS(record$LWS, Document$LWS, DocumentBlockedProperties$LWS, initializers$LWS);
   addBlockedPropertyDistortionFactoryInitializers$LWS(record$LWS, Document$LWS.prototype, DocumentProtoBlockedProperties$LWS, initializers$LWS);
@@ -12363,7 +14344,9 @@ function getDistortionFactories$LWS(record$LWS) {
   }
   // Finalize attribute distortions last because the attribute registry is
   // populated by the other distortion factories.
-  factories$LWS[factories$LWS.length] = finalizeAttributeDistortions$LWS;
+  factories$LWS[factories$LWS.length] = finalizeAttributeSetterDistortions$LWS;
+  // Finalize attribute getters (read-side registry) for the same reason.
+  factories$LWS[factories$LWS.length] = finalizeAttributeGetterDistortions$LWS;
   distortionFactoriesCache$LWS.set(document$LWS, factories$LWS);
   return factories$LWS;
 }
@@ -13630,6 +15613,7 @@ function createMembraneMarshall$LWS(globalObject$LWS) {
     const {
       distortionCallback: distortionCallback$LWS,
       liveTargetCallback: liveTargetCallback$LWS,
+      protectDistortions: protectDistortions$LWS,
       revokedProxyCallback: revokedProxyCallback$LWS
       // eslint-disable-next-line prefer-object-spread
     } = ObjectAssign$LWS({
@@ -15765,6 +17749,25 @@ function createMembraneMarshall$LWS(globalObject$LWS) {
       targetPointer$LWS();
       const target$LWS = selectedTarget$LWS;
       selectedTarget$LWS = undefined;
+      if (protectDistortions$LWS && distortionCallback$LWS) {
+        let safeDesc$LWS;
+        try {
+          safeDesc$LWS = ReflectGetOwnPropertyDescriptor$LWS(target$LWS, key$LWS);
+        } catch (error) {
+          throw pushErrorAcrossBoundary$LWS(error);
+        }
+        if (safeDesc$LWS) {
+          ReflectSetPrototypeOf$LWS(safeDesc$LWS, null);
+          const {
+            get: getter$LWS,
+            set: setter$LWS,
+            value: value$LWS
+          } = safeDesc$LWS;
+          if (typeof getter$LWS === 'function' && distortionCallback$LWS(getter$LWS) !== getter$LWS || typeof setter$LWS === 'function' && distortionCallback$LWS(setter$LWS) !== setter$LWS || (typeof value$LWS === 'object' && value$LWS !== null || typeof value$LWS === 'function') && distortionCallback$LWS(value$LWS) !== value$LWS) {
+            throw pushErrorAcrossBoundary$LWS(new TypeErrorCtor$LWS('Cannot delete property with a distortion.'));
+          }
+        }
+      }
       try {
         return ReflectDeleteProperty$LWS(target$LWS, key$LWS);
       } catch (error) {
@@ -16447,6 +18450,7 @@ class VirtualEnvironment$LWS {
       distortionCallback: distortionCallback$LWS,
       instrumentation: instrumentation$LWS,
       liveTargetCallback: liveTargetCallback$LWS,
+      protectDistortions: protectDistortions$LWS,
       revokedProxyCallback: revokedProxyCallback$LWS,
       signSourceCallback: signSourceCallback$LWS
       // eslint-disable-next-line prefer-object-spread
@@ -16460,6 +18464,7 @@ class VirtualEnvironment$LWS {
       distortionCallback: distortionCallback$LWS,
       instrumentation: instrumentation$LWS,
       liveTargetCallback: liveTargetCallback$LWS,
+      protectDistortions: protectDistortions$LWS,
       revokedProxyCallback: revokedProxyCallback$LWS
     });
     const {
@@ -16639,6 +18644,7 @@ class VirtualEnvironment$LWS {
     }
   }
   lazyRemapProperties(target$LWS, ownKeys$LWS, unforgeableGlobalThisKeys$LWS) {
+    // istanbul ignore else: primitive targets are silently ignored
     if (typeof target$LWS === 'object' && target$LWS !== null || typeof target$LWS === 'function') {
       const args$LWS = [this.blueGetTransferableValue(target$LWS)];
       ReflectApply$LWS(ArrayProtoPush$LWS, args$LWS, ownKeys$LWS);
@@ -16805,8 +18811,10 @@ function assignFilteredGlobalDescriptorsFromPropertyDescriptorMap$LWS(descs$LWS,
     // Avoid overriding ECMAScript global names that correspond to
     // global intrinsics. This guarantee that those entries will be
     // ignored if present in the source property descriptor map.
+    // istanbul ignore else: ES intrinsic names are intentionally skipped
     if (!ESGlobalsAndReflectiveIntrinsicObjectNames$LWS.includes(ownKey$LWS)) {
       const unsafeDesc$LWS = source$LWS[ownKey$LWS];
+      // istanbul ignore else: no action needed when unsafeDesc is falsy
       if (unsafeDesc$LWS) {
         // Avoid poisoning by only installing own properties from
         // unsafeDesc. We don't use a toSafeDescriptor() style helper
@@ -16845,6 +18853,7 @@ function linkIntrinsics$LWS(env$LWS, globalObject$LWS) {
     } = ReflectiveIntrinsicObjectNames$LWS; i$LWS < length$LWS; i$LWS += 1) {
     const globalName$LWS = ReflectiveIntrinsicObjectNames$LWS[i$LWS];
     const reflectiveValue$LWS = globalObject$LWS[globalName$LWS];
+    // istanbul ignore else: all standard reflective intrinsics exist at runtime
     if (reflectiveValue$LWS) {
       // Proxy.prototype is undefined.
       if (reflectiveValue$LWS.prototype) {
@@ -16989,6 +18998,7 @@ function createIframeVirtualEnvironment$LWS(globalObject$LWS, providedOptions$LW
     keepAlive: keepAlive$LWS = true,
     liveTargetCallback: liveTargetCallback$LWS,
     maxPerfMode: maxPerfMode$LWS = false,
+    protectDistortions: protectDistortions$LWS = false,
     signSourceCallback: signSourceCallback$LWS
     // eslint-disable-next-line prefer-object-spread
   } = ObjectAssign$LWS({
@@ -17004,6 +19014,7 @@ function createIframeVirtualEnvironment$LWS(globalObject$LWS, providedOptions$LW
     blueCreateHooksCallbackCache$LWS.set(blueRefs$LWS.document, blueConnector$LWS);
   }
   // Install default TrustedTypes policy in the virtual environment.
+  // istanbul ignore next: requires both trustedTypes API (unavailable in jsdom) and a defaultPolicy option
   // @ts-ignore trustedTypes does not exist on GlobalObject
   if (typeof redWindow$LWS.trustedTypes !== 'undefined' && isObject$LWS(defaultPolicy$LWS)) {
     // @ts-ignore trustedTypes does not exist on GlobalObject
@@ -17018,6 +19029,7 @@ function createIframeVirtualEnvironment$LWS(globalObject$LWS, providedOptions$LW
     distortionCallback: distortionCallback$LWS,
     instrumentation: instrumentation$LWS,
     liveTargetCallback: liveTargetCallback$LWS,
+    protectDistortions: protectDistortions$LWS,
     revokedProxyCallback: keepAlive$LWS ? revokedProxyCallback$LWS : undefined,
     signSourceCallback: signSourceCallback$LWS
   });
@@ -17025,6 +19037,7 @@ function createIframeVirtualEnvironment$LWS(globalObject$LWS, providedOptions$LW
   // window
   // window.document
   // In browsers globalThis is === window.
+  // istanbul ignore next: coverage never runs where globalThis !== window
   if (typeof globalThis === 'undefined') {
     // Support for globalThis was added in Chrome 71.
     // However, environments like Android emulators are running Chrome 69.
@@ -17070,6 +19083,7 @@ function createIframeVirtualEnvironment$LWS(globalObject$LWS, providedOptions$LW
     ReflectApply$LWS(DocumentProtoOpen$LWS, redDocument$LWS, []);
     ReflectApply$LWS(DocumentProtoClose$LWS, redDocument$LWS, []);
   } else {
+    // istanbul ignore next: coverage never runs in old Chromium (<v86)
     if (IS_OLD_CHROMIUM_BROWSER$LWS) {
       // For Chromium < v86 browsers we evaluate the `window` object to
       // kickstart the realm so that `window` persists when the iframe is
@@ -17405,7 +19419,7 @@ function toSourceText$LWS(value$LWS, sourceType$LWS) {
   // tools from mistaking the regexp or the replacement string for an
   // actual source mapping URL.
   /\/\/# sandbox(?=MappingURL=.*?\s*$)/, '//# source']);
-  sourceText$LWS = `\n//# LWS Version = "0.28.1"\n${sourceText$LWS}`;
+  sourceText$LWS = `\n//# LWS Version = "0.28.3"\n${sourceText$LWS}`;
   return sourceType$LWS === 1 /* SourceType.Module */ && indexOfPragma$LWS(sourceText$LWS, 'use strict') === -1 ?
   // Append "'use strict'" to the extracted function body so it is
   // evaluated in strict mode.
@@ -18209,7 +20223,7 @@ function wrapPlatformResourceLoader$LWS(dep$LWS, key$LWS) {
   depRegistry$LWS.set(dep$LWS, secureDep$LWS);
   return secureDep$LWS;
 }
-/*! version: 0.28.1 */
+/*! version: 0.28.3 */
 
 const loaderDefine = (globalThis ).LWR.define;