W3C home > Mailing lists > Public > public-webappsec@w3.org > September 2012

Re: unsafe-inline for style-src

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Thu, 20 Sep 2012 14:30:50 -0400
Message-ID: <505B60DA.7090603@mit.edu>
To: Adam Barth <w3c@adambarth.com>
CC: Mike West <mkwst@google.com>, public-webappsec@w3.org
On 9/20/12 2:16 PM, Adam Barth wrote:
> Maybe it only works for data that's been pre-filled into input@value ?

It would work for that, yes.

-Boris
Received on Thursday, 20 September 2012 18:31:19 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Thursday, 20 September 2012 18:31:20 GMT