W3C home > Mailing lists > Public > www-style@w3.org > April 2003

Re: CSS and Security

From: Kynn Bartlett <kynn@idyllmtn.com>
Date: Wed, 16 Apr 2003 09:32:28 -0700
Cc: www-style@w3.org
To: "Ernest Cline" <ernestcline@mindspring.com>
Message-Id: <03A783FD-7029-11D7-B637-000393D9E692@idyllmtn.com>

On Wednesday, April 16, 2003, at 07:47 AM, Ernest Cline wrote:
> Apparently CSS can be used for security, but I can't find any reference
> to it in the specifications. The only reference I can find is an
> unofficial one at:
> http://images.ucomics.com/comics/ft/2003/ft030416.gif
Heh, cute.  Other people have already mentioned the obvious, so I won't
belabor that.

It's interesting to note, though, that there are security problems 
by CSS.  In specific, it's possible to make a style sheet which lets the
server know if the user has visited certain sites recently.


Kynn Bartlett <kynn@idyllmtn.com>                     http://kynn.com
Chief Technologist, Idyll Mountain                http://idyllmtn.com
Author, CSS in 24 Hours                       http://cssin24hours.com
Inland Anti-Empire Blog                      http://blog.kynn.com/iae
Shock & Awe Blog                           http://blog.kynn.com/shock
Received on Wednesday, 16 April 2003 12:28:51 UTC

This archive was generated by hypermail 2.3.1 : Monday, 2 May 2016 14:27:07 UTC