As Pointed out in 1. can be legitimate for HTML5 that comes about to be produced as XML but served as a daily textual content/html without the need of New security measures for example Material Security Coverage defend people more correctly, although new work integrated from ARIA aids developers offer waiting for link from Press Release