MathML 4 extensions for alignment and possible deprecation of <maligngroup/> and <malignmark/>

[NSoiffer]

Having just implemented a polyfill for elementary math, that got me thinking about some related ideas:

1. The most obvious concept related to long division is synthetic division. It is basically the same idea as long division except that you are dividing polynomials. With synthetic division, the columns contain numbers (the coefficients of the polynomial), not just digits. As a refresher, see this page and the example taken from it below):

Polynomial Division	Synthetic Division

2. Synthetic division is a shorthand for long division of polynomials (left example above). Long division of polynomials is basically the same idea as long division of numbers except that instead of digits, you have monomials that need to go into their own column. Doing that automatically requires knowing the variable you want to "sort" on so that each monomial goes into the proper column.
3. A very similar property is needed when displaying systems of equations -- each monomial wants to be in it's own column (in this case, the top level element would not be mlongdiv, but mstack).

There are a few complications such as decimal alignment of the coefficients:

      8.44x + 55  y =  0
      3.1 x -  0.7y = -1.1

Note that alignment requires knowing what characters/operators act as column separators (e.g., +and -, along with = and a few other relational operators). These would be inside of mo elements, so potentially any mo element could be a separator, or maybe an attribute specifies what the separators are (something to think about/discuss).

The above example is taken from the MathML 3 spec formaligngroup and malignmark. I think only MathPlayer ever implemented those elements and I suspect that you can count on your fingers the number of times they have been used. It is a very complicated feature to implement and to use. In contrast, I think the above features are an incremental extension to elementary math layout, so implementation (especially via an extension to the polyfill I wrote), means that supporting these features would be universal (assuming I or someone else extended the polyfill). Just as important, using this extension would be simple as it is a declarative notation that doesn't require modifying the generated layout other than at a high level (wrapping with mstack or mlongdiv). It would be less powerful though.

I suspect that this proposed extension to elementary math handles the large majority of cases where people play games with tables to achieve alignment, both in MathML and in TeX. @davidcarlisle: do you have any estimate of how many uses of table for alignment in TeX would be covered by this proposed extension? What are some of the cases that are missed by it?

[dginev]

Hello. I was looking for an appropriate issue to attach a recent piece of news I spotted, and since this issue discusses malignmark, it seems appropriate. There is a recent post about bypassing the sanitization of DOMPurify through an abuse of parsing MathML in HTML, details here:
https://portswigger.net/daily-swig/dompurify-mutation-xss-bypass-achieved-through-mathml-namespace-confusion

Summarized as:

In the MathML namespace, two special elements – mglyph and malignmark – allow the creation of a markup that is “in HTML namespace, but on reparsing it is in MathML namespace, [meaning that] the subsequent style tag [is] parsed differently and leading to XSS,” the researcher explained.

This might be relevant if you're searching for additional reasons for deprecation.

[NSoiffer]

Kind of weird that it is mglyph and malignmark and not maligngroup. I read the link and there was no hint as to why those two and not maligngroup or any other element with empty content.

…

On Fri, Oct 9, 2020 at 4:02 PM Deyan Ginev ***@***.***> wrote: Hello. I was looking for an appropriate issue to attach a recent piece of news I spotted, and since this issue discusses malignmark, it seems appropriate. There is a recent post about bypassing the sanitization of DOMPurify through an abuse of parsing MathML in HTML, details here: https://portswigger.net/daily-swig/dompurify-mutation-xss-bypass-achieved-through-mathml-namespace-confusion Summarized as: In the MathML namespace, two special elements – mglyph and malignmark – allow the creation of a markup that is “in HTML namespace, but on reparsing it is in MathML namespace, [meaning that] the subsequent style tag [is] parsed differently and leading to XSS,” the researcher explained. This might be relevant if you're searching for additional reasons for deprecation. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#181 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AALZM3HME3RMGCKAY6HMDXTSJ6JBXANCNFSM4KCGBEGA> .

[davidcarlisle]

On Thu, 15 Oct 2020 at 21:41, NSoiffer ***@***.***> wrote: Kind of weird that it is mglyph and malignmark and not maligngroup. I read the link and there was no hint as to why those two and not maligngroup or any other element with empty content.

maligngroup is only used in mathml containers like mrow so is not a problem. mglyph is allowed in token elements and in a mathml-in-html elements token elements are the entry point for _html_ so most elements inside an <mtext> are html elements except for those two which stay in the mathml namespace.

…

On Fri, Oct 9, 2020 at 4:02 PM Deyan Ginev ***@***.***> wrote: > Hello. I was looking for an appropriate issue to attach a recent piece of > news I spotted, and since this issue discusses malignmark, it seems > appropriate. There is a recent post about bypassing the sanitization of > DOMPurify through an abuse of parsing MathML in HTML, details here: > > https://portswigger.net/daily-swig/dompurify-mutation-xss-bypass-achieved-through-mathml-namespace-confusion > > Summarized as: > > In the MathML namespace, two special elements – mglyph and malignmark – > allow the creation of a markup that is “in HTML namespace, but on reparsing > it is in MathML namespace, [meaning that] the subsequent style tag [is] > parsed differently and leading to XSS,” the researcher explained. > > This might be relevant if you're searching for additional reasons for > deprecation. > > — > You are receiving this because you authored the thread. > Reply to this email directly, view it on GitHub > < #181 (comment) >, > or unsubscribe > < https://github.com/notifications/unsubscribe-auth/AALZM3HME3RMGCKAY6HMDXTSJ6JBXANCNFSM4KCGBEGA > > . > — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#181 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAJVYAXNEM475TJ2U7M7XXDSK5M6FANCNFSM4KCGBEGA> .

[NSoiffer]

Thanks for the explanation -- that makes sense.

[davidcarlisle]

the schema has been updated to restrict use of malignmark, and to remove grouplaign attribute except in legacy schema

w3c/mathml-schema@4e897dc

[NSoiffer]

The group tentatively agreed that these are no longer needed: they aren't implemented in browsers and are rarely generated. The main use is to get alignment right at the character level (e.g., decimal alignment). @davidcarlisle pointed out that there is a Unicode space character (U+2007) that is meant to be the width of a digit and that this can be used as padding to get decimal alignment to work.

I pointed out that with intent table properties, the accessibility problem of splitting equations across columns goes away.

This section (which is somewhat simplified from MathML 3) still is quite large, so removing this would be a good simplification to the spec and help align it with it.

@MurrayIII currently uses malignmark in his UnicodeMath implementation. He will investigate whether this is really needed. If not, then we can remove these from the spec.

[MurrayIII]

For the equation

Word copies the following MathML

<mml:math xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:m="http://schemas.openxmlformats.org/officeDocument/2006/math"><mml:mtable><mml:mtr><mml:mtd><mml:mrow><mml:maligngroup/><mml:mn>10</mml:mn><mml:malignmark/><mml:mi>x</mml:mi><mml:mi> </mml:mi><mml:mo>+</mml:mo><mml:maligngroup/><mml:mn>3</mml:mn><mml:malignmark/><mml:mi>y</mml:mi><mml:mo>=</mml:mo><mml:mn>2</mml:mn></mml:mrow></mml:mtd></mml:mtr><mml:mtr><mml:mtd><mml:mrow><mml:maligngroup/><mml:mn>3</mml:mn><mml:malignmark/><mml:mi>x</mml:mi><mml:mi> </mml:mi><mml:mo>+</mml:mo><mml:maligngroup/><mml:mn>13</mml:mn><mml:malignmark/><mml:mi>y</mml:mi><mml:mo>=</mml:mo><mml:mn>4</mml:mn></mml:mrow></mml:mtd></mml:mtr></mml:mtable></mml:math>

[NSoiffer]

Reformatted the above MathML to be more readable:

<math><mtable>
  <mtr><mtd><mrow>
        <maligngroup/><mn>10</mn><malignmark/><mi>x</mi><mi/><mo>+</mo>
        <maligngroup/><mn>3</mn><malignmark/><mi>y</mi><mo>=</mo><mn>2</mn>
   </mrow></mtd></mtr>
   <mtr><mtd><mrow>
        <maligngroup/><mn>3</mn><malignmark/><mi>x</mi><mi/><mo>+</mo>
        <maligngroup/><mn>13</mn><malignmark/><mi>y</mi><mo>=</mo><mn>4</mn>
   </mrow></mtd></mtr>
</mtable></math>

This makes it easier to see the maligngroup and malignmark elements.

[davidcarlisle]

If I change that example to 103 rather than 13, so the expressions have different lengths

<!DOCTYPE html>
<html>
  <head>
    <meta charset="UTF-8"/>
    <title>malign</title>
  </head>
  <body>
   <math><mtable>
  <mtr><mtd><mrow>
        <maligngroup/><mn>10</mn><malignmark/><mi>x</mi><mi/><mo>+</mo>
        <maligngroup/><mn>3</mn><malignmark/><mi>y</mi><mo>=</mo><mn>2</mn>
   </mrow></mtd></mtr>
   <mtr><mtd><mrow>
        <maligngroup/><mn>3</mn><malignmark/><mi>x</mi><mi/><mo>+</mo>
        <maligngroup/><mn>103</mn><malignmark/><mi>y</mi><mo>=</mo><mn>4</mn>
   </mrow></mtd></mtr>
</mtable></math>
  </body>
</html>

that renders (in Edge here) as

So there is no alignment at all visually (similarly in firefox)

If I add

<script src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.0/MathJax.js?config=TeX-AMS-MML_SVG"></script>

to get mathjax rendering it still doesn't align:

[dginev]

Here is a Nov 2024, Chrome workaround for that example using float: right; and extra mtd elements, for archival purposes:

https://codepen.io/dginev/pen/XWvGEEZ

[davidcarlisle]

@dginev ooh scary, I can confirm that works (and essentially works the same way in HTML table markup)

So the containing box for a table cell for the purpose of float positioning is the implicit column box?

I tried to navigate mdn or the css specs to find a clear statement on what's supposed to happen if you apply float:... to a table cell, but failed to find anything definitive, did you find something, or did you just find this works?

[dginev]

or did you just find this works?

Indeed, just finding things that work by analogy with HTML.
I believe I found float:right; in a demonstration of how to "right-align a <div> element with CSS".

[davidcarlisle]

yes right aligning a div in its container with float:right is clear enough but It had never occurred to me you could apply it to a table cell or where it would float to if you did. It's clearly legal (as I found documentation that using float implicitly changes the table-cell display property to block) but I couldn't find a clear description of what happens. Nice example in any case

[davidcarlisle]

with firefox it seems I just need text-align, with chrome based browsers float:right is needed, but float-left in left aligned columns doesn't work at all. So this document renders Murray's example in both.

<!DOCTYPE html>
<html>
  <head>
    <script>
      window.addEventListener("load",function () {
	  document.querySelectorAll("mtable").forEach(m =>
	      m.innerHTML=m.innerHTML
		  .replace(/<maligngroup><\/maligngroup>/g,
			   "</mrow></mtd><mtd style='padding:0pt;text-align:right;float:right'><mrow>")
		  .replace(/<malignmark><\/malignmark>/g,
			   "</mrow></mtd><mtd style='padding:0pt;text-align:left;'><mrow>")
	  )},false);
     </script>
    <meta charset="UTF-8"/>
    <title>malign</title>
  </head>
  <body>
   <math><mtable>
  <mtr><mtd><mrow>
        <maligngroup/><mn>1000</mn><malignmark/><mi>x</mi><mi/><mo>+</mo>
        <maligngroup/><mn>3</mn><malignmark/><mi>y</mi><mo>=</mo><mn>2</mn>
   </mrow></mtd></mtr>
   <mtr><mtd><mrow>
        <maligngroup/><mn>3</mn><malignmark/><mi>x</mi><mi/><mo>+</mo>
        <maligngroup/><mn>103</mn><malignmark/><mi>y</mi><mo>=</mo><mn>4444</mn>
   </mrow></mtd></mtr>
</mtable></math>
  </body>
</html>

firefox

edge

[NSoiffer]

Can someone with Safari verify @davidcarlisle's solution works on Safari?

If so, it seems like there is a reasonable solution for dealing with Word's output and we can simplify the MathML full spec and get it in closer agreement to core. Given this solution, it seems highly unlikely even this scaled down version of maligngroup/malignmark would ever get added to core.

[FrankMittelbach]

Here is the output from firefox (left) and safari on the right:

[davidcarlisle]

Here is the output from firefox (left) and safari on the right:

thanks

[davidcarlisle]

@NSoiffer so looks like it basically works in chrome based browsers., firefox and Safari