W3C home > Mailing lists > Public > www-style@w3.org > August 2004

Re: per-site user stylesheet rules

From: Anne van Kesteren <fora@annevankesteren.nl>
Date: Fri, 20 Aug 2004 10:46:42 +0200
Message-ID: <4125BA72.6010805@annevankesteren.nl>
To: Robin Berjon <robin.berjon@expway.fr>
CC: "L. David Baron" <dbaron@dbaron.org>, www-style@w3.org

> That being said, do these things need to be specified in CSS? Or, to put 
> it another way, is it likely that you will ever send such stylesheets 
> over the wire? To be honest, I strongly doubt it. The security issues 
> are too important: if you go to http://dahut.org/ and I send a 
> stylesheet that has:
> 
> @document domain(mozilla.org) {
>   :root {
>     display: none;
>   }
> }
> 
> I assume you wouldn't want that to apply, especially as I could do 
> things nastier than that such as attach an XBL keyboard logger to your 
> bank's site.
> 
> So it's limited to local files that will never be interchanged. Does it 
> need to become a standard?

Maybe a "End User CSS Module" could be created, which includes such 
among other functionalities.


-- 
  Anne van Kesteren
  <http://annevankesteren.nl/>
Received on Friday, 20 August 2004 08:47:11 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 27 April 2009 13:54:32 GMT