W3C home > Mailing lists > Public > public-houdini@w3.org > February 2015

Re: [parser] Scope question

From: Tab Atkins Jr. <jackalmage@gmail.com>
Date: Thu, 19 Feb 2015 08:36:24 -0800
Message-ID: <CAAWBYDB19+Roz8Goig4L8HpQGQCUvrWHiRQoBjpi6oo9HGQWVA@mail.gmail.com>
To: Daniel Glazman <daniel.glazman@disruptive-innovations.com>
Cc: "public-houdini@w3.org" <public-houdini@w3.org>
On Thu, Feb 19, 2015 at 7:58 AM, Daniel Glazman
<daniel.glazman@disruptive-innovations.com> wrote:
> On 19/02/2015 16:46, Tab Atkins Jr. wrote:
>> Well....  actually, the only reason we don't expose cross-origin
>> stylesheets is the possibility of information leakage due to comments
>> in the source.  The parser doesn't emit comments per spec.  We
>> probably could expose a parsed representation of them, then.  We just
>> can't offer a CSSOM of them.
> I don't understand what you said above. The CSSOM does not contain such
> comments and still you say you can't offer a CSSOM? Did you mean you
> can't offer access to the textual contents of the original stylesheet?

The CSSOM *does* contain such comments, because it offers access to
the textual contents of the stylesheet.

Nothing else is private, since it can all be inferred from styling, at
least theoretically.

Received on Thursday, 19 February 2015 16:37:10 UTC

This archive was generated by hypermail 2.3.1 : Thursday, 19 February 2015 16:37:11 UTC