W3C home > Mailing lists > Public > www-style@w3.org > November 2007

Re: [CSS21] Case-insensitivity not defined

From: Martin Duerst <duerst@it.aoyama.ac.jp>
Date: Fri, 16 Nov 2007 14:12:33 +0900
Message-Id: <6.0.0.20.2.20071116141024.099b2b50@localhost>
To: "Mark Davis" <mark.davis@icu-project.org>, fantasai <fantasai.lists@inkedblade.net>
Cc: www-international@w3.org, www-style@w3.org

At 09:01 07/11/16, Mark Davis wrote:
>If CSS identifiers do not exclude compatibility characters (such as Kelvin and the ff ligature), then lowercasing is the *least* of the security issues to worry about. 

The identifiers really in question are limited to things such as
counter names. Such names are used internal to a single style
sheet, or internal to a set of coordinated style sheets, and
it is therefore difficult to immagine how they could be used
for security attacks such as spoofing and the like.

Regards,    Martin.



#-#-#  Martin J. Du"rst, Assoc. Professor, Aoyama Gakuin University
#-#-#  http://www.sw.it.aoyama.ac.jp       mailto:duerst@it.aoyama.ac.jp     
Received on Friday, 16 November 2007 05:47:17 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 27 April 2009 13:54:56 GMT