W3C home > Mailing lists > Public > public-houdini@w3.org > February 2015

Re: [parser] Scope question

From: Tab Atkins Jr. <jackalmage@gmail.com>
Date: Thu, 19 Feb 2015 08:36:24 -0800
Message-ID: <CAAWBYDB19+Roz8Goig4L8HpQGQCUvrWHiRQoBjpi6oo9HGQWVA@mail.gmail.com>
To: Daniel Glazman <daniel.glazman@disruptive-innovations.com>
Cc: "public-houdini@w3.org" <public-houdini@w3.org>
On Thu, Feb 19, 2015 at 7:58 AM, Daniel Glazman
<daniel.glazman@disruptive-innovations.com> wrote:
> On 19/02/2015 16:46, Tab Atkins Jr. wrote:
>> Well....  actually, the only reason we don't expose cross-origin
>> stylesheets is the possibility of information leakage due to comments
>> in the source.  The parser doesn't emit comments per spec.  We
>> probably could expose a parsed representation of them, then.  We just
>> can't offer a CSSOM of them.
>
> I don't understand what you said above. The CSSOM does not contain such
> comments and still you say you can't offer a CSSOM? Did you mean you
> can't offer access to the textual contents of the original stylesheet?

The CSSOM *does* contain such comments, because it offers access to
the textual contents of the stylesheet.

Nothing else is private, since it can all be inferred from styling, at
least theoretically.

~TJ
Received on Thursday, 19 February 2015 16:37:10 UTC

This archive was generated by hypermail 2.3.1 : Thursday, 19 February 2015 16:37:11 UTC