W3C home > Mailing lists > Public > public-web-security@w3.org > June 2011

Re: XSLT style sheets

From: Daniel Veditz <dveditz@mozilla.com>
Date: Sat, 11 Jun 2011 11:52:56 -0700
Message-ID: <4DF3B988.5060906@mozilla.com>
To: Brandon Sterne <bsterne@mozilla.com>
CC: Adam Barth <w3c@adambarth.com>, public-web-security@w3.org
On 6/10/11 4:41 PM, Brandon Sterne wrote:
>> Tentative recommendation: Control XSLT with style-src.  (Warning: I
>> haven't though through this recommendation carefully.)
> 
> I just pushed a changeset that adds XSLT stylesheets to the style-src
> directive:
> https://dvcs.w3.org/hg/content-security-policy/rev/6f4cab889cb5

This is how the Firefox 4 implementation already works, fwiw.
-Dan Veditz
Received on Saturday, 11 June 2011 18:53:32 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 20:26:19 UTC