W3C home > Mailing lists > Public > www-style@w3.org > April 2007

[becss] security notice

From: fantasai <fantasai.lists@inkedblade.net>
Date: Wed, 04 Apr 2007 15:22:12 -0500
Message-ID: <461408F4.2010503@inkedblade.net>
To: www-style@w3.org

The BeCSS draft should note somewhere that the 'binding'
property can introduce scripting and, unlike other CSS
properties, may need to be stripped out of user-submitted
content on sites like LiveJournal and weblogs.

~fantasai
Received on Wednesday, 4 April 2007 19:22:31 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 27 April 2009 13:54:50 GMT