| - `security/` contains tests intended to ensure that input is not detectable cross-origin. | |
| - `tentative/` contains tests to detect common cases where it may be beneficial to pending input. | |
| - All positive tests are marked as tentative, as the spec permits UAs to omit reporting pending input. |