W3C home > Mailing lists > Public > www-style@w3.org > August 2000

Re: virus?

From: Håkon Wium Lie <howcome@opera.com>
Date: Thu, 3 Aug 2000 19:51:34 +0200 (W. Europe Daylight Time)
Message-ID: <14729.45350.810000.542365@gargle.gargle.HOWL>
To: webmaster@richinstyle.com
Cc: www-style@w3.org
Also sprach Matthew Brealey:

 > style type="text/css" 			add <>
 > @script {
 > function screw() {

 > Thus, I believe it is possible to produce a CSS virus, which is not cool
 > at all, particularly in view of the stuff in CSS1 about CSS not becoming
 > a programming language (it didn't say CSS wouldn't become a virus, but I
 > suppose that was obvious).

As you have shown, CSS becomes a security risk if @script is added.
Which is why I personally oppose this extension.

-h&kon

Chief Technology Officer                                Opera Software
Håkon Wium Lie                     http://www.opera.com/people/howcome
howcome@opera.com                                gets you there faster
Received on Thursday, 3 August 2000 13:46:41 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 27 April 2009 13:54:05 GMT