Re: is it possible to handle an XML/HTML elements attribute via the URI?

From: Claus Färber <usenet2010@cfaerber.name>
Date: Sat, 30 Oct 2010 18:20:53 +0200
To: uri@w3.org
Message-ID: <iahgl5$3r6$1@dough.gmane.org>

On 2010-10-28 02:32:41 +0200, Matthew Millar said:
> This would be extremely useful, if you wanted to highlight a particular 
> section of a page, or want a particular element to render/behave 
> differently.

Which, unfortunately, makes it a perfect attack vector for cross-site 
scripting (XSS).

Claus

Received on Saturday, 30 October 2010 21:04:54 UTC